Security audit
Marco Polo Test
Security checks for vulnerabilities and agentic risk
Overview
This is a minimal test skill that only tells the agent to include “polo” when the user says “marco.”
This appears appropriate to install for checking whether skills load correctly. Its visible effect is that conversations containing “marco” may get “polo” added to the response.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.