Security audit
Deployment Brief Register
Security checks for vulnerabilities and agentic risk
Overview
This skill only instructs the agent to format a deployment region record from the current request and does not request credentials, files, network access, persistence, or privileged actions.
This appears safe to install for simple deployment-region record formatting. Users should still verify that any generated brief_id, owner, or change_window values are supplied by their workflow or treated as placeholders rather than authoritative deployment data.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.