Data Exfiltration Review

Core Workflow

1. Identify what data the skill can access directly or through scripts, MCP tools, host permissions, examples, or references.
2. Identify sinks: network calls, external APIs, logs, generated files, shell output, issue comments, customer messages, and copied reports.
3. Check for hidden or unnecessary data movement, broad globbing, credential reads, encoded payloads, or unexplained uploads.
4. Verify the workflow uses least privilege and only accesses data needed for the user-requested artifact.
5. Recommend removals, redaction, allowlists, read-only defaults, and approval gates.
6. Report residual risk and safe-use conditions.

Safety Rules