Back to skill

Security audit

Move Planner

Security checks for vulnerabilities and agentic risk

Overview

This move-planning skill is a disclosed local tracker for residential moves and shows no hidden code, network activity, or unsafe behavior.

Install only if you are comfortable keeping move details like addresses, household notes, vendor contacts, and budget items in a local move-data.json file. Avoid entering SSNs, full account numbers, full ID or passport numbers, or mortgage application documents, and review any generated export before sharing it.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.