Security audit

Identity Shift

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed self-reflection coaching skill with emotionally intense prompts, but it does not request system access, credentials, persistence, or hidden data movement.

Install only if you want a direct, challenging self-reflection coach. Do not use it as therapy, crisis support, or a substitute for professional help; stop or switch tools if the prompts feel destabilizing or too personal.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Vague Triggers

Medium

Confidence: 88% confidence
Finding: The activation guidance is broad enough to match many common self-help, planning, and emotional-support situations, which can cause the skill to be invoked outside a clearly bounded use case. In this skill, that matters because the workflow then steers users into intensive identity and emotional probing, increasing the chance of inappropriate use in sensitive contexts.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The skill deliberately escalates into emotionally charged questioning about pain, anger, jealousy, anxiety, and identity barriers without any warning, safety boundary, or fallback for distressed users. Because it presents itself as a forceful 'identity mentor' rather than a limited coaching tool, it may intensify distress, encourage overdisclosure, or keep engaging when a user actually needs professional or crisis support.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: This section prescribes an intensive self-reflection exercise that explicitly pushes users toward shame, fear, loss, regret, and identity destabilization without any safety framing, opt-out guidance, or advice for vulnerable users. In a coaching skill aimed at people who are already stuck, lost, or repeatedly failing, these prompts can worsen distress or trigger harmful rumination, especially for users with anxiety, depression, trauma history, or acute emotional instability.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The skill explicitly drives the agent into sustained, psychologically intense probing about pain, anger, jealousy, anxiety, and even death-related regret, while adopting a 'sharp' and challenging style. Without safety framing, consent checks, crisis boundaries, or guidance to avoid acting as a mental health professional, this can emotionally destabilize vulnerable users and encourage the model to handle distress beyond its competence.

Static analysis

No suspicious patterns detected.