Security audit
Better Stack
Security checks for vulnerabilities and agentic risk
Overview
This Better Stack skill is mostly coherent, but it understates some incident-management actions that can change alerting and escalation state.
Review carefully before installing if your Better Stack account can affect production incidents or on-call routing. The skill should require explicit approval for creating, acknowledging, or escalating incidents, even though only create_incident is tagged as write in the artifact.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.