Security audit

📡 Knowledge & Trends Engine

Security checks for vulnerabilities and agentic risk

Overview

This skill is not clearly malicious, but it should be reviewed because it can read prior memory, fetch user-provided content, and persist summaries on a schedule without tight consent or sensitivity controls.

Install only if you are comfortable with the skill building long-term memory from prior conversations and shared content. Before using scheduled review or content parsing, confirm that your environment scopes memory per user, blocks unsafe internal URL fetches, and offers a way to preview, redact, disable, or delete saved summaries.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:38
Finding: Overly Broad Cross-Session Memory Access and Persistent Retention
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:79
Finding: Unrestricted Fetching of User-Controlled URLs
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Ssd 3

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The top-level description authorizes periodic summarization of user interactions and parsing of user-shared media, then ties that to memory accumulation and self-iteration. Because no data minimization, sensitivity filtering, or consent boundaries are defined, the skill can capture personal or confidential information and persist it beyond the user's expectation.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The skill explicitly includes periodic scheduled reviews and a cron-driven self-review path, but it does not define strong gating around when autonomous review and storage are allowed. That can cause the agent to process prior conversations and external-content-derived concepts without a fresh, specific user request, increasing the chance of unintended collection and persistence of sensitive information.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill description and workflows state that conversation-derived concepts and parsed article/video/image content will be stored into memory files, including public-tier artifacts, but there is no prominent warning or consent mechanism. Users may share content assuming transient analysis, while the skill silently converts it into retained memory, creating privacy and compliance risk.
Content: No source excerpt is available for this finding.

Ssd 3

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: This workflow instructs the agent to scan recent notes and concept files, extract concepts from prior conversations, and store results in memory/tier1-public/ summaries. That creates a direct path for user-derived information to be propagated into broadly readable or less-protected artifacts, amplifying exposure if sensitive details were discussed in earlier sessions.
Content: No source excerpt is available for this finding.

Ssd 3

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The skill tells the agent to 'remember' user explanations and store them as structured concept notes, including source metadata, summaries, and related concepts. Without safeguards, a user may provide proprietary, personal, or otherwise sensitive information that gets retained and cross-linked indefinitely, making later disclosure or misuse more likely.
Content: No source excerpt is available for this finding.