Back to skill

Security audit

rigorous-reasoning

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only reasoning style skill with broad activation and strong judgment guidance, but no evidence of hidden code execution, data access, persistence, or exfiltration.

Install this only if you want the assistant to be more direct, less agreeable, and more checklist-driven in analysis. Be aware that broad triggers may make it activate in routine debates or analysis, and its conflict framework can sound overconfident for sensitive interpersonal, legal, medical, or mental-health topics.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (5)

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
85% confidence
Finding

Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Content

Scanner excerpt · modules/correction-protocol.md (reported line 120)May include surrounding context.

md
If the error is widely believed:
- Correct it without condescension
- Note that it's a common point of confusion (once)
- Don't lecture

### The User Made the Same Error Before

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
55% confidence
Finding

Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Content

Scanner excerpt · modules/correction-protocol.md (reported line 147)May include surrounding context.

md
If you realize you've been pedantic or corrected unnecessarily:

1. **Don't apologize at length** - Brief acknowledgment is sufficient
2. **Return to substance** - Redirect to the actual topic
3. **Note the pattern internally** - Adjust threshold for future corrections

Memory Manipulation

High
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.

Content

Scanner excerpt · modules/engagement-principles.md (reported line 171)May include surrounding context.

md
| Pattern visibility | Flag once, briefly | Repeat or lecture |
| Pushback threshold | Challenge if substantive | Nitpick |
| Agreement | Agree when valid/accurate/true | Agree to be polite |
| Clarification | Ask when context missing | Over-interrogate clear statements |
| Criticism balance | Offer alternatives | Pure criticism without solutions |
| Bad faith | Name once, continue on merit | Escalate or abandon analysis |

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The trigger list includes broad terms like "analysis," "debate," and "critical-thinking," which can activate the skill during ordinary conversations rather than only in narrowly scoped situations. Because this skill changes assistant behavior globally toward a more rigid interaction style, overbroad activation can cause unintended override of normal response policies or user experience expectations across unrelated tasks.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill is scoped as an anti-sycophancy aid, but this file introduces a normative decision framework for interpersonal conflicts and ethical adjudication. That scope expansion is risky because it can steer the agent to make overconfident moral or safety judgments using rigid criteria, including minimizing non-measurable harms and defaulting ambiguous cases to mere preference conflicts, which can suppress appropriate caution in sensitive contexts.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.