Security audit
Drop Spindle Spinning Basics
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent craft-planning skill for drop-spindle yarn making, with only disclosed filesystem-based logging and no executable payload.
Reasonable to install for craft guidance. Expect the skill to use local files for logs, dashboards, recipes, reminders, and notes from photos or inventory you provide; avoid giving it unrelated personal files or sensitive photos.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.