Security audit
Checklist
Security checks for vulnerabilities and agentic risk
Overview
This is a markdown-only checklist coaching skill with coherent, disclosed instructions and no executable behavior or sensitive access.
This skill appears safe to install for checklist design and operational coaching. Users should still treat its historical examples and external links as informational, not as a substitute for domain-specific safety, medical, legal, financial, or operational review when stakes are high.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.