Security audit
Thepaper
Security checks for vulnerabilities and agentic risk
Overview
No scanner issues or artifact-backed security concerns were found in the supplied evidence.
This release has no reported SkillSpector findings and VirusTotal is still pending. Because the actual skill artifacts were not available in this review context, users should still review the skill contents and install it only if its requested access matches what they expect.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.