Security audit
persona-generator
Security checks for vulnerabilities and agentic risk
Overview
This skill only helps turn user-provided research notes into structured UX personas and does not request unusual access or permissions.
Before installing, consider that persona generation may involve interview or survey data, so users should avoid sharing unnecessary personal identifiers. The skill itself instructs the agent to protect privacy and mark assumptions clearly.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.