Back to skill

Security audit

Cn Color Converter

Security checks for vulnerabilities and agentic risk

Overview

This is a simple local color conversion skill with no evidence of hidden data access, network activity, persistence, or destructive behavior.

This skill appears safe to install for local color-format conversion. It is marked as automatically generated and includes promotional links in the documentation, so review those links before clicking, but the script itself does not access the network, files, credentials, or persistent system settings.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.