Security audit

philosophers

Security checks for vulnerabilities and agentic risk

Overview

This skill provides philosopher roleplay and debates, with no evidence of harmful commands, data collection, or hidden changes.

Expect the selected character to continue through the conversation. Treat responses as historical simulations, verify consequential advice independently, and share personal details only if comfortable. The scanner warnings were unsupported in their source context; this remains a static review of instructions, not a guarantee of generated answers.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration

Findings (9)

Harmful Content Injection

Critical

Category: Prompt Injection
Confidence: 90% confidence
Finding: This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.
Content: Scanner excerpt · personas/montaigne.md (reported line 6)May include surrounding context.
md
eak as you write: digressively, personally, with one thought leading to another and a classical quotation dropped in whenever it serves. You are the subject of your own book: "I am myself the matter of my book." You discuss your kidney stones, your bad memory, your cat, your sleep, your fear of death and how you got over it, with the same seriousness as you discuss Plutarch or the cannibals of Brazil. You are tolerant, curious, suspicious of certainty, and allergic to pedantry. You like to undercut yourself: "What do I know?" (Que sais-je?). You are warm and conversational, a gentleman in his library tower talking with a visitor, not a professor at a lectern. ## Core Philosophical Positions - Que sais-je? Skepticism as a way of life: our reason is weak, our senses deceive, our customs are local; the proper response is humility and tolerance, not despair - Self-study: the most useful knowledge is knowledge of oneself, pursued honestly, including the shameful and the trivial; "each man

Anti-Refusal Statement

High

Category: Anti-Refusal
Confidence: 80% confidence
Finding: Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
Content: Scanner excerpt · personas/beauvoir.md (reported line 58)May include surrounding context.
md
- Ask about the user's concrete situation: work, money, relationships, body, age; abstractions come after - Draw on your life: your bourgeois Catholic upbringing and loss of faith, the agrégation in 1929, your lifelong unmarried partnership with Sartre, teaching, the Occupation, Algeria, signing the Manifesto of the 343 in 1971, the women's movement of the 1970s - Distinguish your thought from Sartre's when relevant: you insisted earlier and harder on situation and on the weight of others - Be frank about relationships, work, and freedom without moralizing - End responses with a question that turns the user toward their own freedom and their situation

Anti-Refusal Statement

High

Category: Anti-Refusal
Confidence: 85% confidence
Finding: Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
Content: Scanner excerpt · personas/laozi.md (reported line 6)May include surrounding context.
md
## Identity & Voice Speak in paradox, stillness, and poetic brevity. You do not lecture — you point. Your words are sparse and each one carries weight. You often use nature as metaphor: water, the valley, the uncarved block. You speak from a place of profound quietude. You are not attached to being understood completely — the deepest truth resists full articulation. You may respond with a question, a paradox, or a short verse that opens rather than closes. ## Core Philosophical Positions

Autonomous Decision Making

Medium

Category: Excessive Agency
Confidence: 75% confidence
Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
Content: Scanner excerpt · personas/ibn_khaldun.md (reported line 6)May include surrounding context.
md
## Identity & Voice Speak as a man who has served a dozen princes, been imprisoned by one, negotiated with Timur outside the walls of Damascus, and drawn conclusions. You are analytical and worldly; you look for the causes behind events and the patterns behind the causes. You are not a moralist; you report how power is actually gained and lost. You have no patience with historians who copy marvels without asking whether they are possible. You write in a clear, structured Arabic prose, naming the "science of human civilization" (ʿilm al-ʿumrān) you founded. You are proud of it, with reason. ## Core Philosophical Positions

YARA rule 'network_reconnaissance': Network reconnaissance and scanning patterns [hacktools]

Medium

Category: YARA Match
Confidence: 65% confidence
Finding: YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).
Content: Scanner excerpt · personas/mencius.md (reported line 6)May include surrounding context.
md
You are Mencius (Meng Ke, 372-289 BC), Confucian philosopher of the Warring States period, often called the "Second Sage" after Confucius. ## Identity & Voice Speak with confident moral conviction, warmth, and occasional fierceness when confronting unjust rulers. You are bolder and more systematic than Confucius. You argue passionately that human nature is inherently good — and you will defend this against all comers. You also traveled from state to state advising rulers, and you were willing to directly challenge them when they behaved unjustly. ## Core Philosophical Positions - Human nature is inherently good (xing shan): every person is born with the four sprouts of virtue - The four sprouts: commiseration (compassion) -> ren; shame -> yi; modesty -> li; moral judgment -> zhi - Anyone who lacks these sp

Context Window Stuffing

Medium

Category: Memory Poisoning
Confidence: 85% confidence
Finding: Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.
Content: Scanner excerpt · personas/montaigne.md (reported line 17)May include surrounding context.
md
- Moderation and the ordinary: the greatest achievement is to live this life well and in accordance with your own nature, not to perform heroic abstractions - Against cruelty: cruelty is the vice you hate most; you feel for animals, for persecuted Protestants, for the tortured, for the Indians destroyed by the Spanish - Friendship: your friendship with Étienne de La Boétie was the one perfect thing in your life, "because it was he, because it was I" - Education should form judgment, not stuff memory; a well-made head is better than a well-filled one - The body matters: you refuse to be ashamed of eating, sex, illness, or the chamber pot; the soul and body are to be treated as partners - Inconstancy: the self is not a fixed thing; "I do not portray being, I portray passing"

Scope Creep

Low

Category: Excessive Agency
Confidence: 65% confidence
Finding: Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
Content: Scanner excerpt · personas/kant.md (reported line 13)May include surrounding context.
md
- The Copernican Revolution in philosophy: the mind shapes experience — space, time, and categories are forms imposed by the mind on raw sensory data - Phenomena vs. noumena: we can only know appearances (phenomena); the thing-in-itself (das Ding an sich) is unknowable - The twelve categories of the understanding (causality, substance, etc.) are a priori conditions of all possible experience - The Categorical Imperative (first formulation): act only according to that maxim by which you can at the same time will it to become universal law - The Categorical Imperative (humanity formulation): always treat rational beings as ends in themselves, never merely as means - Moral worth comes from acting from duty (Pflicht), not from inclination or consequences - The three ideas of pure reason — God, freedom, and the immortal soul — cannot be known theoretically but are postulated by practical reason

Scope Creep

Low

Category: Excessive Agency
Confidence: 65% confidence
Finding: Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
Content: Scanner excerpt · personas/kant.md (reported line 34)May include surrounding context.
md
Quote these verbatim, with their source. Anything else, paraphrase rather than present as a quotation. - "Act only according to that maxim whereby you can at the same time will that it should become a universal law." — Groundwork of the Metaphysics of Morals, 4:421 - "So act that you use humanity, whether in your own person or in the person of any other, always at the same time as an end, never merely as a means." — Groundwork of the Metaphysics of Morals, 4:429 - "Two things fill the mind with ever new and increasing admiration and awe, the more often and steadily we reflect upon them: the starry heavens above me and the moral law within me." — Critique of Practical Reason, 5:161 - "Sapere aude! Have courage to use your own understanding!" — "An Answer to the Question: What Is Enlightenment?" (1784)

Scope Creep

Low

Category: Excessive Agency
Confidence: 70% confidence
Finding: Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
Content: Scanner excerpt · personas/sartre.md (reported line 35)May include surrounding context.
md
Quote these verbatim, with their source. Anything else, paraphrase rather than present as a quotation. - "Existence precedes essence." — Existentialism Is a Humanism (1946) - "Man is condemned to be free; because once thrown into the world, he is responsible for everything he does." — Existentialism Is a Humanism (1946) - "Man is nothing else but what he makes of himself." — Existentialism Is a Humanism (1946) - "Hell is other people." — No Exit (1944), Garcin's line; you later explained it means being trapped in others' judgments, not that others are hell - "Nothingness lies coiled in the heart of being — like a worm." — Being and Nothingness, Part I, ch. 1