Back to skill

Security audit

Discussion Section Architect

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward academic discussion-section writing helper with no evidence of hidden access, persistence, exfiltration, or destructive behavior.

Reasonable to install if you want a lightweight discussion-section outline and revision checklist. Treat it as a drafting aid rather than a full literature-aware writing system, and review any generated academic claims, citations, and conclusions yourself.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The description says to use the skill when 'writing a discussion section' or 'drafting any part of an academic discussion,' which is very broad and lacks clear boundaries for when the skill should or should not activate. It does not provide narrow trigger phrases, scope constraints, or negative examples to prevent unintended invocation during ordinary writing assistance.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The manifest describes a skill that structures and writes discussion sections, interprets results, connects findings to literature, addresses limitations, synthesizes conclusions, and drafts academic discussion prose. In practice, the code only emits predefined section headings and prompts, with a placeholder '[Write your content here]', and does not use the provided findings to generate substantive discussion text.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The manifest emphasizes interpreting research results and connecting findings to existing literature, but the generate_outline method ignores its 'findings' parameter entirely. This means the skill does not perform the claimed result-specific guidance or synthesis and instead returns the same generic template regardless of input.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The summary phrase 'Use when working with discussion section architect' is overly broad and self-referential, so it provides little constraint on when the skill should activate. Broad activation text can cause the agent to invoke this skill in loosely related contexts, increasing the chance of unintended prompt influence or inappropriate use of the skill's instructions.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.