Back to skill

Security audit

Goal Clarifier

Security checks for vulnerabilities and agentic risk

Overview

This is a low-risk conversational skill that helps clarify goals before planning and does not run code, access data, or take actions.

Install this if you want the agent to pause and clarify vague requests before proposing solutions. Be aware that it allows implicit invocation, so it may ask clarifying questions during ordinary planning conversations; disable implicit use if you prefer to call it manually.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.