Security audit
PostLake accounts
Security checks across malware telemetry and agentic risk
Overview
This skill is a read-only PostLake account lookup helper that uses a user-provided API key and does not install or persist anything.
Install this only if you want your agent to read the list and status of social accounts connected to your PostLake workspace. Keep POSTLAKE_API_KEY scoped and protected; the skill does not publish content itself, but it exposes account IDs and handles to the agent for later posting workflows.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.