Security audit
PlanWright Control Plane
Security checks for vulnerabilities and agentic risk
Overview
This is a plain markdown skill that tells agents how to use PlanWright MCP tools for coordinating coding work and recording an audit trail.
Install this only if you intend to use PlanWright as an external coordination and audit system. Review what your PlanWright MCP server records or stores, especially diffs, test output, project notes, and context files, before using it with private repositories.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.