Security audit

Agent Reflection Engine

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local trace-analysis helper, with the main caution that agent traces and generated reports may contain sensitive information.

Install only if you are comfortable giving it local agent trace files. Avoid traces containing secrets, customer data, private prompts, or proprietary reasoning unless the output location is access-controlled, and remember that --verbose can print the report to the terminal.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The skill explicitly encourages collecting and reflecting on agent decision traces, including free-form 'thoughts' fields, but provides no warning that these traces may contain sensitive user data, credentials, proprietary prompts, or internal reasoning artifacts. This creates a real privacy and data-governance risk because operators may log, retain, or share highly sensitive trace content without sanitization or minimization safeguards.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The tool processes and persists agent execution traces containing 'thoughts' and observations, which may include sensitive internal reasoning, credentials, prompts, or other confidential context. Writing this derived report to disk without warning, minimization, or redaction increases the risk of unintended disclosure, especially because the skill's purpose is explicitly to analyze detailed agent traces.

Static analysis

No suspicious patterns detected.