Back to skill

Security audit

Tob Poc Budget Justify

Security checks for vulnerabilities and agentic risk

Overview

The supplied scan evidence does not show malicious or review-worthy behavior for this skill version.

This appears suitable to install based on the available evidence. As with any skill, review its visible instructions and only grant credentials, local file access, or external service access when those permissions match what you intend it to do.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.