Security audit
Uplo Hr
Security checks for vulnerabilities and agentic risk
Overview
No harmful behavior was evidenced by the available scan context, but the actual skill artifact was not present for direct inspection.
The available scanner signals are clean or pending, and there is no concrete artifact evidence of malicious or suspicious behavior. Because the actual skill files were not available for direct review, users should still inspect the skill contents and requested permissions before installing, especially for any credential, filesystem, or automation access.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.