Back to skill

Security audit

Async & Concurrency Reviewer

Security checks for vulnerabilities and agentic risk

Overview

This is an instruction-only code review skill for async and concurrency bugs, with no executable code or hidden access requests.

Reasonable to install for async and concurrency code review. Avoid pasting confidential code unless you trust the host agent, and check whether the agent's memory settings allow the optional common-issue tracking to persist across sessions.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.