Security audit
Milestone Schedule Register
Security checks for vulnerabilities and agentic risk
Overview
This skill is a narrow scheduling helper that converts milestone deadlines to UTC without requesting credentials, private file access, persistence, or external calendar changes.
Before installing, confirm that your scheduling workflow supplies the intended default timezone for unlabeled local deadlines; otherwise the skill itself is narrow, disclosed, and does not appear to access private data or mutate external systems.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.