Security audit
Stat Tool
Security checks for vulnerabilities and agentic risk
Overview
This is a simple local file-metadata helper with no evidence of hidden network access, credential use, persistence, or destructive behavior.
Before installing, understand that the skill can reveal basic metadata for files or filesystem paths it is asked to inspect, such as size, permissions, and timestamps. It does not show evidence of reading file contents or sending data elsewhere, but its documentation is more ambitious than the current script implementation.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.
