Security audit
wilma-triage
Security checks across malware telemetry and agentic risk
Overview
This skill is a coherent school-notification triage helper, but it needs access to Wilma school data and Google Calendar to do its job.
Install this only if you intend the agent to read Wilma data for all students, inspect selected school attachments, remember triage preferences, and add or remove school-related Google Calendar events. Review the stored calendar ID, preferences, and any daily schedule you create, and use a dedicated calendar if you want easier review or rollback.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.