Back to skill

Security audit

Narrative Registry

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent brand narrative registry with disclosed read/write behavior and no hidden executable code.

Install this only if you intend to use the Aaron marketing registry workflow. When the required host runtime is available, it can persist brand canon events and regenerate narrative views, so review proposed canon changes before authorizing them.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.