Security audit
Olares Cluster (olares-cli cluster)
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed Olares cluster-management guide that can inspect and modify cluster resources, but its sensitive powers are aligned with that purpose and include user-confirmation guidance.
Install only if you intend to let your agent operate Olares cluster resources through `olares-cli`. Review commands before confirming destructive actions, avoid `--yes` unless scripting deliberately, and do not use `--show-passwords` unless you are sure the output will not be logged or stored.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.