Security audit
Read GPX
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local GPX route parser with disclosed, purpose-matched behavior and no evidence of hidden network, credential, persistence, or destructive activity.
Reasonable to install if you want local GPX analysis. GPX files can reveal precise route and location history, so only run the helper on files you intend to share with your agent and review any generated route or pacing advice before relying on it outdoors.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.