Security audit
Gateway Recovery
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed, narrow recovery-notification helper, but users should confirm where its automatic message is sent and how any startup hook is installed.
Before installing, confirm where the automatic recovery notification will be sent, inspect any separate LaunchAgent or startup hook used on your machine, and ensure the recovery flag path is writable only by trusted local users or processes.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.