Security audit
Supplier Terms Reader
Security checks for vulnerabilities and agentic risk
Overview
This skill only formats supplier purchasing terms from user-provided input and does not request credentials, private files, persistence, or execution authority.
This appears safe to install for formatting supplier purchasing terms. Users should still avoid including unnecessary sensitive supplier data in supplier_csv because the skill only needs the listed purchasing fields.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.