Back to skill

Security audit

Review Loading Error Empty States

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local checklist-style workflow for reviewing UI loading, error, empty, partial, and retry states, with optional user-approved notes or Ritual Cloud setup.

Safe to install for guided UI state review. Before using the optional Ritual Cloud path or writing OKF notes, make sure you intentionally approve the npm install, cloud connection, and any repository note files.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.