Security audit
assumption-audit
Security checks for vulnerabilities and agentic risk
Overview
This skill is a low-risk reasoning aid for identifying important assumptions before decisions or plans proceed.
Installers should expect this skill to make the agent more explicit about assumptions and sometimes verify relevant facts with available tools. It does not add code execution, persistence, or privileged access on its own, but users should still review any tool use the agent proposes in sensitive projects.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.