Security audit
Cn Tip Calculator
Security checks for vulnerabilities and agentic risk
Overview
This is a simple local tip-calculator skill with no evident data access, network activity, persistence, or hidden behavior.
This skill appears safe to install for local tip calculations. Be aware that the README contains promotional external links unrelated to the calculator, and the marketplace credential tag seems inaccurate; you should not provide credentials or visit links unless you independently intend to.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.