Security audit
Capacity Ledger Desk
Security checks for vulnerabilities and agentic risk
Overview
This skill is a simple capacity-window entry formatter with no scripts, credentials, private file access, or persistence.
This appears low risk to install. Users should treat the returned capacity ledger entry as generated output and verify it before using it in a real scheduling or capacity system, since the skill does not connect to authoritative ledger data or enforce external capacity constraints.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.