Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Security audit
Inventory Supply Chain
Security checks for vulnerabilities and agentic risk
Overview
This skill is mostly a business inventory playbook, but its purchase-order and receiving instructions could affect real suppliers, inventory records, and accounts payable without clearly requiring approval.
Review this skill before installing in any agent that has access to ERP, purchasing, email, supplier portals, accounting, or inventory systems. It is safer when used as an advisory/template skill that drafts recommendations and purchase orders for human review, not as an autonomous operator that sends orders or updates records.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The purchase-order workflow includes creation, sending, confirmation, and receiving steps, but the skill description does not warn users that it may generate or send procurement documents with financial and operational consequences. Without an explicit warning and approval gate, users or upstream agents may invoke the skill assuming it is advisory only, creating risk of unauthorized orders, supplier communications, or accounting side effects.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The skill exposes broad natural-language trigger phrases such as generating purchase orders, scoring suppliers, and running operational actions without clear confirmation boundaries. In an agentic environment, generic phrasings can cause unintended activation from ambient conversation or over-eager routing, potentially leading to unauthorized procurement or business workflow changes.
- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The README explicitly encourages users to 'Generate a purchase order' without warning that this may create or alter procurement records, trigger downstream workflows, or require approval before execution. In an inventory and supply chain skill, this is operationally sensitive because users may assume the action is advisory when it could result in real business transactions or unauthorized commitments.
- Content
Static analysis
No suspicious patterns detected.