Security audit
Agentsop Conventions Pinning
Security checks for vulnerabilities and agentic risk
Overview
This is a documentation-only skill that helps users create and maintain agent convention files, with no hidden execution or data access behavior found.
Before installing, understand that this skill is meant to help create persistent instruction files that future coding agents may automatically read. Review any generated CLAUDE.md, AGENTS.md, .cursor/rules, or .clinerules content before committing it, and do not place secrets or private credentials in shared convention files.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.