Security audit
Requesting Code Review
Security checks for vulnerabilities and agentic risk
Overview
This is a simple code-review workflow guide with no executable payload or hidden behavior found.
Install this if you want agents to prompt for structured code review during development. Be aware that using the referenced reviewer subagent may share code diffs and implementation context with that review workflow, which is normal for code review but should be used only in repositories where that is acceptable.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.