Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md | `zip-root` | ZIP **根目录直接是 `SKILL.md`** | `dist/zip-root/<name>/SKILL.md` + `<name>-<ver>.zip` |
Security audit
pasm-agent-authoring
Security checks for vulnerabilities and agentic risk
Overview
This is a developer-oriented agent-authoring skill whose persistence and packaging behavior is disclosed and aligned with its purpose.
Install only if you are comfortable adding a third-party Python developer package and having agent state saved under ~/.pasm-agents. Use a virtual environment, review the upstream package if this will touch private repositories or important agent state, and be aware that the primary usage documentation is Chinese.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Rogue AgentSelf-Modification, Session Persistence
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md | `zip-root` | ZIP **根目录直接是 `SKILL.md`** | `dist/zip-root/<name>/SKILL.md` + `<name>-<ver>.zip` |
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md | `zip-root` | ZIP **根目录直接是 `SKILL.md`** | `dist/zip-root/<name>/SKILL.md` + `<name>-<ver>.zip` |
Session Persistence
Medium
- Category
- Rogue Agent
- Confidence
- 60% confidence
- Finding
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
- Content
md The base kit for building agents on the PASM cognitive engine. Ships a BaseAgent SDK (observe / recall / mood / act / feedback / save with persistent JSON state), an agent framework (registry, isolated repo probing, scenario simulation harness, core-contract check toolboxes) and a skill-packaging library producing the two archive layouts platforms require. Write an agent by subclassing BaseAgent and implementing an action pool plus a reply template; the engine tier (light / core / bionic) is always reported, never hidden. Zero LLM dependency, offline-runnable, stdlib only.
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The user-facing documentation switches into Chinese for the main skill description and usage guidance, but does not indicate that another language is available or that the locale is intentional and limited to a specific region. This can violate language/locale policy because it effectively forces a specific language without user opt-in.
- Content