Security audit
Social Calendar Builder
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed social media calendar planning helper with scoped memory reads and confirmation-gated writes, and it does not automate posting.
Before installing, be aware that the skill uses your project memory and analytics exports to plan cadence and may save calendar outputs or cadence proposals when you confirm. It is not designed to post, schedule, or access closed-platform accounts directly.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.
