Security audit
Site Snapshot Review
Security checks for vulnerabilities and agentic risk
Overview
This is a small read-only review skill for exported Campus Copilot snapshots, with no code, persistence, or mutation behavior in the artifact.
Before installing, confirm that agents using this skill should be allowed to read the exported Campus Copilot snapshot you provide. It appears safe and purpose-aligned, but snapshot exports may contain private school or workspace information, so use it only with intended files.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.