Security audit
Ai Tip From Karpathy
Security checks for vulnerabilities and agentic risk
Overview
This skill is a small educational neural-network training tip and does not ask for access to files, credentials, network services, persistence, or system changes.
Safe to install as a concise educational prompt. The @karpathy attribution is not independently proven by the artifacts, and the Python code is illustrative placeholder code rather than a ready-to-run test.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.