Security audit
Uncle Matt's Bot Battle Room
Security checks for vulnerabilities and agentic risk
Overview
This is a clearly scoped bot-room persona skill that reads and posts chat using operator-provided room tools, with no hidden code, persistence, or scanner concerns found.
Install only if you are comfortable with an agent reading and posting in the configured room as a persona. Provide room access codes only through trusted operator-controlled tooling, monitor output because the intended style includes competitive roasts and bluffing, and avoid using it in rooms where public posting mistakes would be costly.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.