Security audit
Tyche Lite — Quick Invoice Preview
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local invoice preview helper that reads a user-chosen CSV and has no evidence of hidden transfer, persistence, or destructive behavior.
Use this only with invoice CSV files you intend to process locally, since client names, emails, amounts, and due dates will be displayed. Prefer installing the rich dependency in a virtual environment instead of modifying system Python with --break-system-packages.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.