Security audit
Social Media Content Generator
Security checks for vulnerabilities and agentic risk
Overview
No malicious signals were provided, but the target skill artifact was not available in the workspace for a full content review.
Proceed only if the marketplace listing shows a coherent SKILL.md and install metadata matching the stated purpose. Because the artifact content was unavailable in this review environment, inspect the skill text before installing and avoid providing credentials or sensitive local data unless the skill clearly explains why they are needed.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.