Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed repo-backed reliability wrapper that runs fixed ARW commands and writes expected monitoring artifacts.
Install this only if you intend to run ARW against a trusted local checkout. Review any real alert recipient and out_dir values before enabling immediate alerts or non-dry-run delivery, because the wrapper delegates those effects to the ARW repository configuration.
Code enumerates, copies, or searches environment variables for secrets. Bulk environment access can collect credentials unrelated to the skill's stated purpose.
def _env(repo_root: Path) -> dict[str, str]:
env = os.environ.copy()
existing = env.get("PYTHONPATH", "")
env["PYTHONPATH"] = str(repo_root) if not existing else f"{repo_root}:{existing}"
return env
The skill instructs operators to run a local Python wrapper and explicitly references shell execution, environment variables, and file access, but it declares no tool scope or permissions boundary in the skill manifest. That mismatch increases the chance the skill will be executed with broader-than-necessary capabilities, making unintended command execution, repository writes, or environment exposure more likely in a host agent framework.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def _run(command: list[str], repo_root: Path) -> int:
result = subprocess.run(command, cwd=repo_root, env=_env(repo_root))
return result.returncode
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def _run_capture(command: list[str], repo_root: Path) -> subprocess.CompletedProcess[str]:
return subprocess.run(
command,
cwd=repo_root,
env=_env(repo_root),