Back to skill

Security audit

Shrink JSON in Prompts (TOON Encoder/Decoder)

Security checks for vulnerabilities and agentic risk

Overview

This is a self-contained local JSON encoder/decoder skill whose behavior matches its stated purpose.

Reasonable to install for local JSON-to-TOON conversion. TOON is reversible compression, not encryption, so do not put secrets or sensitive JSON into prompts or external tools unless you intend that data to be shared there.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.