Security audit
pontx-dropbox-sign
Security checks for vulnerabilities and agentic risk
Overview
This skill provides cautious Dropbox Sign workflow guidance with explicit dry-run, approval, credential-handling, and callback-safety instructions.
Install only if you intend to build Dropbox Sign workflows through Pontx. Keep API keys in an environment or credential manager, review dry-run previews carefully, and only confirm real sends or downloads after checking signers, documents, account approval, and retention policy.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.