Security audit
ZizkaDB
Security checks for vulnerabilities and agentic risk
Overview
The completed scan reported no findings, and the verdict is benign because all five reviewed dimensions are marked ok; this does not mean risk-free.
The available scan completed and reported no findings, but a benign verdict is not a guarantee of safety. Consider whether this plugin suits your needs and whether you are comfortable installing it.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
SkillSpector was not run because this plugin release contains no bundled skills.
Endor dependency reachability
Checked Nov 11, 2026 · 10:08 PM UTC
No reachable vulnerabilities reported
Endor dependency scan completed.