Security audit
Password Policy Auditor
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent password-audit guide with no executable installer or hidden behavior, but users should treat its code searches and optional breached-password lookup as sensitive.
Install only for repositories and authentication systems you are authorized to review. Keep raw audit output private, redact secrets from reports, and skip or replace the HaveIBeenPwned example with an offline breach dataset if your policy forbids sending any password-derived data to a third party.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.