Back to skill

Security audit

Skillet Sendback

Security checks for vulnerabilities and agentic risk

Overview

This skill is a plain-text workflow guide for verifying code review feedback before acting, with no executable code or hidden data access.

Install this if you want the agent to treat review comments as claims to verify before changing code. Expect it to sometimes ask clarifying questions or push back on questionable feedback; it does not add hidden runtime behavior or request sensitive access.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.