Security audit
Security checks for vulnerabilities and agentic risk
This inbox skill is a small, disclosed set of Pilot Protocol CLI commands, with explicit cleanup commands that users should run carefully because they can clear inbox items or received files.
Before installing or using it, treat the --clear examples as destructive maintenance commands: review inbox and received-file contents first, and only run those commands when you intentionally want to remove those Pilot Protocol items. The ordinary inbox, received, task list, and pending commands are inspection-oriented.
The skill is presented as a unified inbox for review and triage, but it also documents destructive clearing operations that can delete inbox contents or received files. In an agent setting, this creates a mismatch between expected read-only behavior and actual side effects, increasing the risk of accidental data loss if the commands are copied or invoked without careful review.
The documented --clear operations perform destructive actions without any warning, confirmation, or safety guidance. Because the skill is intended for inbox inspection, users or downstream agents may assume the commands are safe to run, leading to irreversible removal of messages or files during routine triage workflows.
No suspicious patterns detected.
