Back to skill

Security audit

Content Engine

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed content-marketing workflow that uses web research, workspace draft files, optional publishing integrations, and memory for brand preferences in ways that fit its stated purpose.

Install this if you want a broad content-marketing assistant. Before using it with live CMS or social integrations, confirm each publish or schedule action, and periodically review stored brand preferences, avoided topics, competitor exclusions, and content calendars so stale memory does not affect future drafts.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The trigger list and usage examples include everyday phrases such as requests to write, research, or decide what to write next, without meaningful constraints. In agent ecosystems, overly broad triggers can cause unintentional routing to a powerful skill that performs multi-phase actions, which may expose user data or take actions the user did not specifically request.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The manifest description is extremely broad and designed to activate on generic writing, research, strategy, and publishing requests. That increases the chance this skill is invoked outside the user's intended scope, causing unexpected web research, memory access, content generation, or downstream publishing actions that exceed least-privilege expectations.

Content

No source excerpt is available for this finding.

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
84% confidence
Finding

Persisting brand preferences and reusing them for every future content generation 'without asking again' enables autonomous decision-making based on stored memory rather than current user intent. In context, this is more concerning because the skill also spans research, formatting, publishing, and promotion, so stale or overly broad memory could silently influence outputs or actions across sessions.

Content

Scanner excerpt · SKILL.md (reported line 211)May include surrounding context.

md
- **Things to avoid**: jargon level, competitors not to mention, topics to skip
- **Existing content URL**: for internal linking and avoiding duplication

Once stored, use these preferences for every future content generation without asking again.

## Edge Cases

Static analysis

No suspicious patterns detected.