Security audit

Scientific Thinking

Security checks for vulnerabilities and agentic risk

Overview

This is a reasoning-style research skill with no executable code, credentials, persistence, or hidden data access.

Install this if you want research answers to be more structured and cautious. Expect it to shape scientific responses by adding uncertainty, alternatives, and evidence boundaries; no artifact evidence indicates hidden execution, data collection, or persistent changes.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The skill enables implicit invocation without any visible trigger constraints, guard conditions, or exclusions. That can cause the agent to auto-apply this skill in situations where scientific-style reasoning is not intended, potentially reshaping outputs, introducing unreviewed tool behavior, or broadening the skill’s influence beyond safe contexts.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: 该文件明确将自身标注为中文文档，且通篇内容仅提供中文说明，属于自然语言层面的语言/locale 限制。依据规则，若技能强制特定语言而未提供用户选择或充分说明其地区适用性，可视为语言策略违例。
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.