Security audit
skill for searching images and boards in zizo library (https://zizo.pro).
Security checks for vulnerabilities and agentic risk
Overview
This is a straightforward Zizo image and board search skill that uses a disclosed API token to send search requests to the configured Zizo HTTPS server.
Install only if you trust Zizo with your search terms and API token. Keep ZIZO_TOKEN private, leave ZIZO_SERVER on the official HTTPS endpoint unless you intentionally use another trusted server, and use public scope unless you want searches to include private or all accessible Zizo content.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.