Security audit
Exa
Security checks for vulnerabilities and agentic risk
Overview
No supplied scanner or local artifact-backed evidence shows harmful behavior, but the target artifact itself was not available for a full coherence review.
The available signals support installation, but review the actual skill files before use if you need high assurance, especially for any commands that access accounts, credentials, local files, or external services.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.