Security audit
Gist Page Preview
Security checks for vulnerabilities and agentic risk
Overview
This skill provides clear instructions for publishing demos as GitHub Gists and previewing them through gists.page, with appropriate privacy cautions.
Before installing, understand that this skill can help an agent publish files to GitHub Gists using your GitHub authentication. Only publish files you intend to share by link, and do not include secrets, credentials, private business data, or sensitive visitor input in a gist demo.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.