Back to skill

Security audit

knowledge-locator

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only knowledge search skill whose broad triggers may activate more often than intended, but its behavior is disclosed and purpose-aligned.

Before installing, understand that this skill may be invoked by broad words like search or recall. Use it when you want memory-palace lookup behavior, and check any referenced palace_manager.py implementation separately because it is not bundled in this artifact.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Shadow Command Trigger

Medium
Category
Trigger Abuse
Confidence
89% confidence
Finding

Using a trigger/command namespace centered on 'search' creates a collision risk with common built-in or platform search behavior. If this skill shadows a native search command, users may invoke the skill unintentionally, allowing it to alter retrieval behavior or inject memory-palace context where a normal search was expected.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The trigger list is broad and includes generic terms like retrieval, search, indexing, recall, and a long natural-language phrase that could match many ordinary user requests. This can cause unintended activation and context hijacking, especially because the skill is designed to influence how information is searched and surfaced during normal workflow and PR review tasks.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.