Security audit
Soc2
Security checks for vulnerabilities and agentic risk
Overview
This is a simple SOC 2 planning workflow skill with no executable code, hidden access, or credential handling.
Reasonable to install as a SOC 2 planning aid. Treat its output as compliance guidance to review with qualified staff, and only share sensitive audit evidence with the agent when you intentionally want help reasoning about it.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.