Security audit
Phy Lock File Auditor
Security checks for vulnerabilities and agentic risk
Overview
This is a local lockfile auditing skill with some reliability caveats, but no evidence of hidden access, exfiltration, persistence, or automatic project changes.
Use this as an advisory local checker. Review findings before acting, especially Cargo phantom and Poetry drift results, and inspect diffs before running suggested fixes such as regenerating lockfiles or adding CI/pre-commit hooks.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.