Back to skill

Security audit

Breadcrumb Writer

Security checks for vulnerabilities and agentic risk

Overview

This is a small instruction-only skill for keeping a single HEARTBEAT.md status file tidy, with no hidden code, installs, credentials, or network behavior found.

Install only if you want an agent to maintain HEARTBEAT.md by replacing it with a short single status block. Confirm the exact file path and use normal safeguards such as version control or backups, since the intended behavior is to overwrite that file rather than append to it.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.