Security audit
Crisis Comms Holding Statement
Security checks for vulnerabilities and agentic risk
Overview
This is a Markdown-only crisis communications drafting guide with no executable code or hidden system access.
This skill is low risk to install from an artifact-security perspective. Users should still treat real crisis facts as sensitive, avoid entering PII unless their agent environment is approved for it, and route any external statements through legal and executive review before publication.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.