Security audit
code-review-skill-agent
Security checks for vulnerabilities and agentic risk
Overview
This is a plain code-review checklist skill with no executable behavior or hidden access requests.
This skill is reasonable to install for teams that want strict backend review guidance. Confirm that your repositories actually use the referenced AGENTS.md and skill-enforcement conventions, because it may recommend rejecting changes that do not follow them.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.