Back to skill

Security audit

Compliance Checklist

Security checks for vulnerabilities and agentic risk

Overview

The skill only guides an assistant to generate compliance checklists and does not request code execution, credentials, persistence, or data export.

Safe to install for planning-oriented compliance checklists. Users should avoid sharing unnecessary sensitive internal details and should follow the skill's own disclaimer by consulting qualified legal or compliance professionals before relying on outputs for regulatory claims or audits.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.