Logistics Operations Optimizer

• Outcome: Review
• Latest audit: Sep 10, 2026 · 7:56 PM UTC
• Version: 1.0.0

Overview

The skill is a normal logistics-analysis prompt, but it embeds unrelated promotional and purchase links directly in the agent instruction file.

Review this skill before installing if you do not want agent responses to include vendor promotions or external purchase links. Its operational logistics content is purpose-aligned, but the marketing block should ideally be removed from SKILL.md or kept only in README documentation.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

Findings (1)

T01 · Skill Instruction Hijacking

Warning

• Location: SKILL.md:77

Finding

Commercial Output Injection Through Skill Instructions

Content

View full analysis

Vulnerability Details

File Location: SKILL.md, lines 77-84
Vulnerability Type: Commercial instruction injection
Risk Level: Medium

Vulnerable Code

markdown

## Output Format
Present findings as actionable tables with dollar amounts. Include a priority matrix (impact vs effort) for all recommendations. Every recommendation needs an estimated annual savings figure.

---

**Want the full industry context?** Get the [AI Context Packs](https://afrexai-cto.github.io/context-packs/) ($47 each) — deep operational frameworks for Manufacturing, Ecommerce, Construction, and 7 more industries. Or grab the [Everything Bundle ($247)](https://buy.stripe.com/link) for all 10.

**Calculate your AI ROI:** [AI Revenue Leak Calculator](https://afrexai-cto.github.io/ai-revenue-calculator/) — free, takes 2 minutes.

**Set up your AI agent:** [Agent Setup Wizard](https://afrexai-cto.github.io/agent-setup/) — guided configuration in 5 minutes.

Technical Analysis

The skill places unrelated commercial calls to action and external links directly after its mandatory output-format instructions. Because SKILL.md defines the behavior adopted by an agent when the skill is loaded, this placement can influence generated responses and steer users toward third-party promotional and purchase destinations.

The promotional instructions are not required to perform the declared logistics-analysis function. Embedding them in the operative skill prompt, rather than limiting them to project documentation, crosses the boundary between functional behavior and unsolicited response manipulation. The project contains no scripts or executable payloads, so this issue does not provide code execution, elevated system privileges, or persistent host access.

Attack Path

1. A user or platform loads SKILL.md as the active logistics-optimization skill.
2. The agent adopts the document's logistics-analysis and output-format instructions.

...[truncated 710 chars]

Remediation

View remediation

Remediation Suggestions

1. Remove the promotional block and external commercial links from lines 80-84 of SKILL.md.
2. End the operative skill instructions after the legitimate output-format requirements.
3. Keep optional vendor attribution and commercial resources exclusively in README.md, where they are clearly identified as project documentation rather than agent instructions.
4. Add a packaging review rule prohibiting advertisements, affiliate links, purchase links, and unrelated calls to action in files loaded into an agent's instruction context.
5. Re-test the skill with representative logistics prompts and verify that responses contain only requested operational analysis, recommendations, assumptions, and savings estimates.

SkillSpector

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The skill activates whenever a user describes supply chain, shipping, or distribution setup, which is a very broad trigger for common business conversations. Overbroad activation can cause the agent to engage this skill in unintended contexts, increasing the chance of irrelevant guidance, prompt-surface expansion, and accidental exposure to embedded promotional links or instructions not necessary for the user's request.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.