Security audit
Skill Test Generate
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed local test-case generator that reads a user-selected skill and validates a generated JSON file.
Install only if you are comfortable letting it read every file under the skill folder or skill zip you choose. Avoid pointing it at folders or archives that contain secrets or unrelated private files, and review the generated JSON before sharing it.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.