Back to skill

Security audit

Reorganize Logic

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed documentation-rebuild workflow that reads project code, writes contract docs, and uses a local verification script without hidden deletion or data transfer behavior.

Before installing, be aware that this skill is intended for a heavy rebuild, not a light documentation sync. It will read project code and old contract docs, create new docs/contracts files, and prepare a deletion manifest. Review the generated manifest and new contracts before applying any deletions, and use the scope option for sensitive or very large repositories.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.