Back to skill

Security audit

B2C Organic Social Media Marketing

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed social-media coaching skill that only moves toward posting after user opt-in and PostLake authorization.

Before installing, confirm you are comfortable connecting social accounts to PostLake and allowing an agent to publish only on the profiles, networks, and daily limits you configure. Do not paste live API keys into chat, and review scheduled posts and analytics logs regularly.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.