Security audit
Iterate Design Review
Security checks for vulnerabilities and agentic risk
Overview
This skill provides a structured design-review workflow and does not show hidden installation, credential access, persistence, or destructive behavior.
Installing this skill should be low risk. It may cause an agent to read relevant project context and update a design draft when you ask for design refinement, so use it on repositories where that review activity is appropriate.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.