Security audit
codebase-knowledge-builder
Security checks for vulnerabilities and agentic risk
Overview
This skill is a documentation helper for studying a chosen codebase, with clear limits against executing code, reading secrets, or writing without approval.
Install this if you want an agent to produce careful, cited codebase documentation. Before use, choose the target repository and output location deliberately, and keep the default limits on secrets, code execution, dependency installation, network fetching, and in-repository writes unless you specifically need and approve them.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.