Back to skill

Security audit

car-maintenance-timeline

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local car-maintenance calculator whose behavior matches its stated purpose and does not show hidden data access, persistence, or network activity.

This appears safe to install for local advisory maintenance planning. Treat its outputs as generic estimates, avoid entering unnecessary personal details in service-history text, and verify intervals against your vehicle owner's manual and local inspection rules.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical
Code
suspicious.dynamic_code_execution
Location
scripts/test_car_maintenance.py:17