Security audit
Receiving Code Review
Security checks for vulnerabilities and agentic risk
Overview
This is a plain instruction-only skill for handling code review feedback, with no executable code, hidden install behavior, persistence, or credential collection.
This skill is reasonable to install if you want a stricter verification-first workflow for code review feedback. Review any actual code edits, GitHub replies, commits, pushes, or merges the agent proposes before allowing them, especially in public or production repositories.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.