Back to skill

Security audit

Entity Optimizer

Security checks for vulnerabilities and agentic risk

Overview

This Markdown-only skill is coherent for entity and knowledge-graph optimization, with some adjacent GEO/page-content guidance that users should treat as advisory rather than automatic authority.

Before installing, expect this skill to inspect and potentially update an entity registry when you authorize it. Review any recommendations that involve people, About pages, social profiles, or public knowledge-base edits, and use the dedicated GEO/content skills for actual page-copy changes.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The file declares itself part of entity-optimizer while containing instructions that direct GEO-specific work, contradicting the manifest boundary. In an agent skill system, this kind of contradictory association is dangerous because it can misroute tasks, weaken safety boundaries between skills, and make the agent follow the wrong operational playbook.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This section expands the skill from entity-registry maintenance into page-level AI-citation readiness and content optimization, which the manifest explicitly says should be handled by a different skill. That scope drift can cause the agent to perform unintended actions, select the wrong workflow, or apply conflicting guidance, increasing the risk of unsafe or policy-inconsistent changes.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
87% confidence
Finding

The manifest scopes the skill to optimizing entity presence through the entities registry and maintaining canonical KG facts, while excluding broader brand-canon and page-level readiness work. These lines advise claiming panels, updating About pages and social profiles, and managing cross-platform profile content, which extends beyond registry-focused entity reconciliation into broader profile/content operations.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The manifest explicitly says this skill is for machine-facing entity identity and knowledge graph maintenance, and specifically says it is not for page-level AI-citation readiness, which should use geo-content-optimizer instead. However, these lines recommend About-page wording, SEO for branded queries, topic-content associations, and content freshness tactics that are characteristic of page/content optimization rather than entity registry maintenance.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.