Security audit
SKILL2
Security checks for vulnerabilities and agentic risk
Overview
This is a local password and token generation helper with behavior that matches its stated purpose.
Safe to install for local credential generation. Treat generated secrets carefully, and prefer stdin for checking real passwords so they do not appear in shell history.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.