Security audit
Bugfix Workflow
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed bug-fixing workflow that guides normal debugging, testing, and documentation without hidden install steps or unrelated data access.
Install this for repositories where you want a structured bug-fix process. Before committing results, review code and documentation diffs, make sure any Playwright or Supabase tooling points at the intended environment, and redact secrets, personal data, production logs, or screenshots from generated bug reports.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.