Security audit
Literature Search Skill
Security checks for vulnerabilities and agentic risk
Overview
This is a simple literature-search instruction skill whose web search and paper-analysis behavior matches its stated academic purpose.
Before installing, remember that this skill is meant to send search queries and fetched paper URLs through external web tools. Use it only for research topics and links you are comfortable sharing with those services; the unused python/curl requirement is worth noticing but is not a security concern by itself.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.