Back to skill

Security audit

DCL Secret Leak Detector

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed secret-scanning checklist with an optional paid external scan, and its capabilities fit its stated security purpose.

Use the free checklist for highly sensitive material if you do not want content sent to an external service. Before using the live MCP scan, confirm the current price and understand that audit hashes and finding metadata may be permanently recorded on-chain.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.