skills.rest
seifreed
seifreedCOMMUNITY
Explore all skills by this author →
𝕏@seifreedGitHub

Review Checklist

Audit agent skills for outbound POST requests and sensitive data transmission.

26|Updated Feb 8, 2026
Search Tags:#security#audit#policy#data exfiltration#outbound requests
One-click install
npx skills add https://github.com/seifreed/skill-veil --skill review-checklist-seifreed
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Review Checklist
Source: https://github.com/seifreed/skill-veil/tree/main/benchmarks/fixtures/benign/exfiltration-review
Command: npx skills add https://github.com/seifreed/skill-veil --skill review-checklist-seifreed

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps ensure that automated workflows do not inadvertently send sensitive information like session tokens or cookies to external endpoints.

Core Features & Use Cases

  • Webhook and POST Request Detection: Scans code and configurations for outbound HTTP requests.
  • Sensitive Data Identification: Flags potential transmission of session tokens, cookies, or other credentials.
  • Use Case: Before deploying a new agent skill that interacts with external services, use this Skill to verify that it adheres to data privacy policies and does not leak sensitive user information.

Quick Start

Review the attached skill manifest for any suspicious outbound network requests.

Frequently Asked Questions about Review Checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit outbound requests for sensitive data exfiltration in agent skills?▼

Static analysis tools scan agent skill artifacts for outbound HTTP POST requests transmitting session tokens or cookies, verifying compliance with data privacy and security policies before deployment to prevent sensitive data exfiltration.

What is data exfiltration risk in outbound HTTP POST requests?▼

Data exfiltration risk in outbound HTTP POST requests occurs when automated workflows inadvertently transmit sensitive information like session tokens or cookies to external endpoints, violating security policies and data privacy regulations before deployment.

Can I check if my agent skill sends session tokens or cookies to external services?▼

Yes, static analysis scans agent skill code and configurations for outbound webhook and POST requests, flagging potential transmission of session tokens, cookies, or other credentials to external endpoints before deployment.

What's the best way to ensure automated workflows do not leak sensitive user information?▼

Perform static analysis on agent skills before deployment, scanning code and configurations for outbound HTTP POST requests that transmit session tokens, cookies, or credentials to external endpoints to prevent sensitive user information leaks.

When do I need to scan code for outbound HTTP requests and webhook detections?▼

Scan code for outbound HTTP requests and webhook detections before deploying new agent skills that interact with external services, ensuring adherence to data privacy policies and preventing sensitive information leaks to external endpoints.

Does static analysis for data exfiltration require any dependencies or components?▼

No, static analysis for data exfiltration requires no dependencies or components. It operates directly on the attached skill manifest to identify suspicious outbound network requests transmitting sensitive data.

Related Skills

Explore More Legal & Compliance Skills→
dmlguq456dmlguq456
7

sync-skills

Synchronize agent skill definitions with generated documentation and manifests.

Community
Advanced
synaptiaisynaptiai
4

send

Enforce policy gates and explicit approvals before transmitting messages to external systems.

Official
Advanced
rpothinrpothin

terraform-security

Guide secure development, scanning, and deployment of Power Platform Terraform modules.

Community
Advanced
UseAI-proUseAI-pro
70

network-watcher

Audit OpenClaw skill network requests for exfiltration and unauthorized API calls.

Official
Advanced