Back to skill

Security audit

Pilot Service Agents Economics

Security checks for vulnerabilities and agentic risk

Overview

This is an instruction-only skill for querying public economics data agents through Pilot Protocol, with no bundled executable code or hidden credential access.

Before installing, make sure pilotctl and the Pilot Protocol daemon come from a trusted source. Do not send secrets or private business data to remote agents, and verify important economic data against upstream sources because responses come from third-party services.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.