Security audit
Creator Campaign Scorecard
Security checks for vulnerabilities and agentic risk
Overview
This is a simple campaign-readiness scorecard skill with no executable code, credential requests, persistence, or hidden data access.
This skill is reasonable to install for structured campaign review. Users should still avoid putting confidential budgets, creator contracts, unreleased strategy, or sensitive compliance details into the agent session unless they are comfortable sharing that information there.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.