Security audit

sil

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed shopping plugin that uses a sil account, catalog tools, and saved buyer preferences to personalize commerce help.

Install only if you want your agent to use a sil account for personalized shopping. Expect it to read your sil identity, address locality/country, preferences, measurements, purchases, and shopping briefs during shopping conversations, and to store sil credentials locally plus lasting shopping facts in your sil account with a stated forget path.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger scope is extremely broad ('any shopping intent') and routes many loosely related requests into a powerful shopping skill that can read user profile data, memory, and shopping history. Over-broad activation increases the chance of inappropriate tool use, unnecessary access to personal data, and prompt-surface expansion where unrelated queries are handled under shopping-specific instructions.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.