Security audit
Retention Policy Planner
Security checks across malware telemetry and agentic risk
Overview
This skill is a simple planning helper that only transforms user-provided governance text into a concise key and does not request special access.
This looks safe to install as a lightweight text-processing skill. It should not need credentials, private files, command execution, or network access; treat any future version asking for those capabilities as a meaningful change to review.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.