Security audit
vasp-skills
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent VASP workflow helper with documentation and a Slurm job template, and it does not show hidden or abusive behavior.
Reasonable to install for VASP users. Before running any copied or generated Slurm script, verify the executable or module setup, task count, walltime, working directory, and output paths, and separately review any companion orchestration skill before using it for transfers, monitoring, or job control.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.