Security audit
Notification Cadence Guide
Security checks for vulnerabilities and agentic risk
Overview
This skill only provides guidance for choosing notification cadence and deduplication rules, with no code execution, credentials, private-file access, or persistence.
This appears safe to install for drafting notification cadence rules. Users should still verify that any downstream composer or scheduler using cadence_mode has its own controls before it sends messages.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.