Back to skill

Security audit

Pilot Service Agents Data

Security checks for vulnerabilities and agentic risk

Overview

This skill is a documentation-only connector for querying disclosed Pilot Protocol open-data agents, with no hidden install code or executable payload found.

Install this only if you trust your Pilot Protocol setup and pilotctl binary. Queries are sent to overlay service agents, and summaries may involve Gemini, so do not include passwords, API keys, private files, or sensitive personal data.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.