Back to skill

Security audit

Source Resolution Desk

Security checks for vulnerabilities and agentic risk

Overview

This skill only processes source guidance supplied in the current request and does not add commands, credential use, persistence, or hidden data access.

This appears safe for routine use when you want an agent to turn supplied source-agreement guidance into a concise resolution object. Only provide source_guidance data you intend the agent to use, since the skill relies on current-request content.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.