Security audit
karpathy-guidelines
Security checks for vulnerabilities and agentic risk
Overview
This is a markdown-only coding-guidelines skill that gives conservative development behavior advice and does not request unusual access or run code.
This skill appears safe to install as coding-process guidance. Be aware that copying it into project agent instruction files may make its behavioral preferences persistent for that project, which is expected for this kind of guideline skill.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.