Security audit
Indexbind
Security checks for vulnerabilities and agentic risk
Overview
This skill is a documentation helper for installing and using the indexbind search package, and its behavior is disclosed and purpose-aligned.
Before installing, decide whether you trust the indexbind npm package itself. Prefer per-project install or npx over a global install unless you need the command available everywhere, and only run indexing commands on directories whose contents you intend to process into search artifacts.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.