Security audit
cgis
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward guide for using local code-graph tools to analyze source-code relationships.
Install this only if you want agents to use CGIS-style code graph tools for local code navigation. Be aware it may create or update a local graph.db from the source paths you choose, so point ingestion at the intended source directory rather than the whole repository when large generated or dependency folders are present.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.