Security audit
Review Diagnostics
Security checks for vulnerabilities and agentic risk
Overview
This skill is a coherent manuscript review toolkit with disclosed local checklist and validation helpers, and no evidence of hidden data access or unsafe behavior.
Before installing, note that the optional helper scripts can create a checklist file and inspect local review/source directories when you run them. Use them only in projects where the docs/reviews/<article-name> convention is acceptable.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.
