Back to skill

Security audit

Content Win Loss Reviewer

Security checks for vulnerabilities and agentic risk

Overview

This is an instruction-only content performance review skill with no code execution, credentials, persistence, or external access requested.

Safe to install as a content analysis helper. Users should still avoid pasting confidential campaign metrics, unreleased product plans, private customer data, or sensitive creator agreements unless they are comfortable using that information in the agent session.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.