Security audit
Lix Agents
Security checks for vulnerabilities and agentic risk
Overview
This skill is an instruction-only helper for getting temporary Lix API tokens, with its credential and install steps disclosed and aligned to that purpose.
Before installing, verify that the lix-agents CLI source and release channel are the ones you trust. Treat generated API tokens as sensitive, avoid exposing them in logs or chat, and approve only token requests you intentionally initiated.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.