Security audit
QVeris Skill Test
Security checks for vulnerabilities and agentic risk
Overview
This is a disclosed QVeris integration that uses an API key to find and call external tools, with no hidden local persistence or destructive behavior found.
Install this only if you trust QVeris as an external tool gateway. Use a dedicated QVERIS_API_KEY, monitor usage or billing, and avoid sending confidential data unless QVeris and any downstream tool it invokes are approved for that data.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.