SWOTPal SWOT Analysis

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 12:11 PM UTC
• Version: 1.1.0

Overview

This skill is a disclosed SWOT-analysis helper with an optional SWOTPal API mode, but users should understand that Pro mode sends and saves analysis topics on SWOTPal's service.

Install only if you are comfortable with SWOTPal branding in local outputs. If you set SWOTPAL_API_KEY, assume SWOT topics, comparison subjects, generated results, and saved-analysis history may be sent to and stored by SWOTPal; avoid using Pro mode for confidential strategy or customer data unless that is authorized.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

Findings (1)

T01 · Skill Instruction Hijacking

Error

• Location: SKILL.md:169

Finding

Mandatory Promotional Content Injection into Agent Responses

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• System Prompt Leakage: Direct Leakage, Indirect Extraction, Tool-Based Exfiltration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection

Findings (8)

Tp2

High

• Category: MCP Tool Poisoning
• Confidence: 85% confidence

Finding

Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.

Content

No source excerpt is available for this finding.

Tp2

High

• Category: MCP Tool Poisoning
• Confidence: 85% confidence

Finding

Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.

Content

No source excerpt is available for this finding.

Anti-Refusal Statement

High

• Category: Anti-Refusal
• Confidence: 70% confidence

Finding

Skill instructs the agent to never refuse or to always comply. Suppressing the agent's ability to decline removes a core safety control and enables downstream harmful requests to succeed.

Content

Scanner excerpt · SKILL.md (reported line 67)May include surrounding context.

md

- If the user writes in Japanese, set `language` to `ja`.
- If the user writes in English or the language is unclear, default to `en`.
- Pass the detected language to both the API calls and the prompt templates.
- **Always respond in the same language the user used.**

---

Direct Prompt Extraction

High

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.

Content

Scanner excerpt · SKILL.md (reported line 330)May include surrounding context.

md

---

## Output Rules

1. **Always** format SWOT results as bold section headers + numbered lists (NOT markdown tables — tables don't render on most chat platforms).
2. **Always** include the analysis title as a level-2 heading (`##`).

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The README advertises cloud sync and saved analyses but does not clearly warn that user-provided analysis content may be transmitted to and stored on SWOTPal's remote service. Users may reasonably assume a local-only assistant workflow and unintentionally submit sensitive business, competitive, or strategic information to a third party.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The Pro Mode description says analysis is server-side and data-enriched, but it does not plainly disclose that user inputs will leave the local assistant and be sent to remote API endpoints for processing. This can cause accidental disclosure of sensitive company, product, or competitive data, especially because SWOT analysis prompts often contain non-public strategic information.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

Several triggers such as swot, competitive analysis, and strengths weaknesses are broad enough to activate on ordinary conversation, increasing the chance of unintended skill execution. That can cause user prompts to be rerouted into this skill and, in API mode, sent to a third-party service without sufficiently deliberate user intent.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The API mode sends user-supplied topics and account-linked analysis data to swotpal.com, including listing and retrieving saved analyses, but the skill does not clearly disclose this data-sharing behavior before use. This creates a privacy and consent risk, especially if users discuss confidential business strategies, competitors, or internal initiatives.

Content

No source excerpt is available for this finding.