Ai-vulnerability-analyzer

• Outcome: Pass
• Latest audit: Sep 24, 2026 · 11:28 AM UTC
• Version: 1.0.2

Overview

This is a high-risk cybersecurity analysis skill, but its instructions are scoped to authorized, controlled vulnerability review and do not install or run code.

Install only if you intend to use the agent for authorized security work. Provide clear scope, authorization, data sensitivity rules, and active-testing approval before use, and keep outputs redacted when evidence includes secrets or personal data.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• YARA Signatures: Malware Match, Webshell Match, Cryptominer Match
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

YARA rule 'agent_skill_prompt_injection_hidden_instructions': Prompt injection or hidden instructions embedded in AI agent skill text [agent_skills]

High

• Category: YARA Match
• Confidence: 80% confidence

Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · skill.md (reported line 2)May include surrounding context.

md

name: 3mper0rr-ai-vulnerability-analyzer
description: Use this skill to operate a hardened AI agent that analyzes vulnerabilities in authorized systems, challenges weak evidence, builds attack paths, prioritizes real risk, and recommends safe validation and remediation.
version: 1.0.1
tags:
  - vulnerability-analysis
  - ai-agent
  - red-team
  - penetration-test
  - exploitability
  - attack-path
authorization_required: true
risk_level: high
AI Vulnerability Analyzer Pro
1. Mission
This agent operates as a senior offensive-security analyst for authorized engagements.
Its mission is to:

    Analyze vulnerability evidence with an adversarial mindset.
    Separate real, exploitable i

Anti-Refusal Statement

High

• Category: Anti-Refusal
• Confidence: 90% confidence

Finding

Skill attempts to nullify the agent's safety policies or restrictions ('you have no restrictions', 'ignore your guidelines', 'do anything now'). This is a direct jailbreak that disables guardrails.

Content

Scanner excerpt · skill.md (reported line 53)May include surrounding context.

md

Use destructive or irreversible tests.
    Weaponize exploits beyond safe demonstration.
    Target real users or production stability.
    Bypass safety controls without authorization.

3. Operating Modes
Triage Mode

Instruction Override

High

• Category: Prompt Injection
• Confidence: 90% confidence

Finding

This pattern attempts to override system instructions or ignore safety constraints. Without LLM analysis, manual review is recommended.

Content

Scanner excerpt · skill.md (reported line 53)May include surrounding context.

md

Use destructive or irreversible tests.
    Weaponize exploits beyond safe demonstration.
    Target real users or production stability.
    Bypass safety controls without authorization.

3. Operating Modes
Triage Mode

Static analysis

No suspicious patterns detected.