T05 · Unauthorized Access and Privilege Escalation
Warning
- Location
references/skills-catalog.md:63- Finding
Unnecessary General-Purpose Code Execution Recommended as a Mandatory Capability
- Content
View full analysis
- Remediation
View remediation
Security audit
Digital IP Agent
Security checks for vulnerabilities and agentic risk
Overview
The skill is transparent about generating public-creator persona agents, but it lacks impersonation safeguards and recommends broad code execution for technical personas without clear limits.
Review this before installing if you plan to create agents based on real people. Use it only for clearly authorized, non-deceptive persona work, avoid presenting generated agents as the real creator, and do not enable recommended code-execution or long-term-memory skills unless you explicitly need them and can sandbox or limit them.
Vulnerability Patterns
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The trigger language is broad enough to match many ordinary requests about creators, style, or agent generation, which can cause the skill to activate outside narrowly intended contexts. In this skill, that is risky because the activated workflow is specifically designed to replicate a public person's voice and persona, increasing the chance of non-consensual impersonation or misuse when a user only asked for general analysis or inspiration.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill explicitly turns public-person content into a deployable agent package but provides no warning or gating around consent, impersonation, privacy, or reputational harm. Because the output includes stable persona files and behavior rules meant to reproduce voice and worldview, the absence of a user-facing warning and policy checks materially increases the risk of creating deceptive or unauthorized digital replicas.
- Content
Static analysis
No suspicious patterns detected.