Security audit
Security checks for vulnerabilities and agentic risk
This skill is a small API-integration guide for sending research tasks to a disclosed third-party orchestration service, with no local code execution or persistence.
Install only if you are comfortable sending prompts, research questions, selected sources, and task details to the dr.eamer.dev API. Avoid submitting secrets, personal data, regulated data, or confidential business material unless you have reviewed that service's privacy, retention, and security practices.
The skill instructs users to send prompts and task data to an external API but does not clearly warn that user inputs, potentially including sensitive data, leave the local environment. This creates a real data-handling and privacy risk because users may unknowingly transmit confidential research, business, or personal information to a third-party service.
This endpoint sends the user's query and selected sources to an external domain, which constitutes data exfiltration from the agent environment to a third-party API. In a research orchestration skill, this may be expected functionality, but it is still dangerous if users are not clearly informed and if sensitive prompts are forwarded without consent or minimization.
POST https://api.dr.eamer.dev/v1/orchestrate/swarm
Body:
{
"query": "What are the most effective treatments for Type 2 diabetes?",
This workflow transmits task content to an external orchestration API, exposing potentially sensitive analytical requests or proprietary material to a third party. The context makes the transmission functionally relevant rather than inherently malicious, but the hierarchical multi-agent design may increase the amount of user data processed externally and therefore increases privacy and confidentiality risk.
POST https://api.dr.eamer.dev/v1/orchestrate/cascade
Body:
{
"task": "Analyze the current state of quantum computing hardware",
No suspicious patterns detected.