Security audit
openwebui-regression-test
Security checks for vulnerabilities and agentic risk
Overview
This skill is a testing checklist for Open WebUI that uses real app state but clearly scopes that access to regression verification and state preservation.
Before installing, be aware this skill is intended for debugging a live Open WebUI setup and may involve logged-in browser sessions, service logs, provider calls, and database checks. Use it only when you want that real-path validation, and keep tests limited to disposable chats and user-approved service restarts.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.