Back to skill

Security audit

Tech Manager Office

Security checks for vulnerabilities and agentic risk

Overview

This skill is a non-executable advisory workflow for technology transfer deals, with no evidence of hidden access, persistence, or unsafe behavior.

This appears safe to install as an advisory skill. Because it discusses IP, valuation, negotiation, and contract drafts, users should treat its outputs as business and legal guidance to review with qualified professionals before relying on them.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.