Security audit
dry-run
Security checks for vulnerabilities and agentic risk
Overview
This skill teaches the agent to preview risky changes before acting and does not add hidden execution, persistence, or data access.
This skill is appropriate for cautious change planning. Before installing, expect it to make agents spend extra effort previewing high-impact operations and producing dry-run reports, but it should not perform the live action unless separately directed.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.