Back to skill

Security audit

Homemade Machine Learning Skill

Security checks for vulnerabilities and agentic risk

Overview

This skill is an educational machine-learning helper that prints explanations, code snippets, and public notebook links without requesting sensitive access.

This appears safe to install for educational use. The main practical caution is that it links to external notebooks; review any notebook before running its code, especially in an environment with personal data or credentials.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.