Security audit
readworthy
Security checks for vulnerabilities and agentic risk
Overview
This skill locally helps judge reading value and keeps a disclosed private reading profile without evidence of hidden network, credential, or destructive behavior.
Install only if you want Codex to keep a local, persistent reading profile about topics, claims, feedback, and article assessments. The state is disclosed and local, but it can accumulate sensitive information about your interests and private reading material, so set READWORTHY_STATE_DIR if you want it contained in a specific location.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.