Security audit
travel-expense-faq
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed travel expense FAQ built from bundled policy documents and does not request sensitive system access or run code.
Install this only if you intend to use the bundled company reimbursement policies as an internal FAQ source. It may expose company process details to users who can access the skill, but it does not itself automate payments, log in to systems, or request credentials.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.