Back to skill

Security audit

Generate Fractional Cfo Firm Client Education Handout

Security checks for vulnerabilities and agentic risk

Overview

This is a simple content-generation skill for drafting fractional CFO client handouts, with no evidence of hidden execution, credential access, persistence, or data exfiltration.

Reasonable to install for drafting fractional CFO client education materials. Review generated financial claims and visuals before publishing, avoid entering sensitive client financial data unless the underlying chat and image tools are approved for that data, and consider asking the publisher to tighten the truncated invocation text and remove the unused Bash permission.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.