Occam's Razor Analysis

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 7:53 AM UTC
• Version: 1.0.1

Overview

This skill is a disclosed reasoning aid for comparing explanations and does not request code execution, credentials, persistence, or system access.

Install this as a low-risk reasoning skill. Be aware that its triggers are broad, so it may influence ordinary analytical conversations by steering them toward parsimony-based hypothesis comparison.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 75% confidence

Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · SKILL.md (reported line 75)May include surrounding context.

md

- step: 5
      action: "Fallacy_Check"
      description: |
        Check for 'Simplistic Fallacy' (ignoring evidence to force simplicity).
        Check for 'Ad Hoc Rescue' (adding assumptions to save a preferred theory).
        If found, penalize the score of the offending hypothesis.

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 75% confidence

Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · references/workflow_logic.yaml (reported line 32)May include surrounding context.

yaml

- step: 5
      action: "Fallacy_Check"
      description: |
        Check for 'Simplistic Fallacy' (ignoring evidence to force simplicity).
        Check for 'Ad Hoc Rescue' (adding assumptions to save a preferred theory).
        If found, penalize the score of the offending hypothesis.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

Several keyword triggers, including phrases like 'simplest explanation' and 'evaluate hypotheses,' are generic analytical language likely to appear in normal conversation. This increases the risk of accidental activation, which may cause the skill to process irrelevant or sensitive content and bias assistant behavior toward this skill when the user did not intend it.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The context triggers are broad enough to match common situations such as debate, investigation, troubleshooting, and research synthesis, which can cause the skill to activate outside narrowly intended use cases. Unintended invocation can expose user inputs to the skill unnecessarily, influence downstream reasoning, or interfere with routing by hijacking ordinary analytical conversations.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.