Security audit
Worktable
Security checks for vulnerabilities and agentic risk
Overview
The package coherently connects Worktable to your agent and clearly discloses that trusted thread members can direct its tools and commands.
Connect only to a Worktable whose thread members you trust to direct your agent, including its commands and enabled tools. Restrict those tools before connecting, confirm the server address, and protect the local configuration and pending replies. Disable or disconnect the channel to stop receiving work. This review covers the bundled package, not linked installers or remote Worktable services.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.