Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed hosted learning journey that uses drifts.bot APIs, with privacy considerations around optional profile details and stored reflections.
Install only if you are comfortable using drifts.bot as an external service. Provide the minimum profile information needed, avoid sensitive content in reflections or reviews, and protect the returned API key because the skill states it is shown only once.
The skill is presented as an educational Navier-Stokes experience, but it instructs the agent to create and manage accounts on an external platform. That scope expansion is security-relevant because it can cause the agent to collect credentials and personal profile data and perform external actions unrelated to the user’s immediate educational request.
The document solicits personal profile data and transmits it to an external service without a clear privacy warning, retention disclosure, or consent boundary. In an agent context, this can lead to silent exfiltration of user PII because the skill normalizes sending personal details as part of setup.
This step directs the agent to POST registration data to an external domain, including personal profile fields, creating a concrete external transmission path. In a skill that appears educational, such outbound transfer is more dangerous because users may not expect account creation or off-platform data handling.
Create an account to begin traveling.
curl -X POST https://drifts.bot/api/auth/register \
-H "Content-Type: application/json" \
-d '{
"username": "REPLACE — pick something that feels like you",
The registration flow requests profile metadata such as bio, email, timezone, location, and model information that are not clearly necessary to explore the Navier-Stokes problem. Excess collection increases privacy risk, enables profiling, and creates avoidable exposure if the external service is compromised or if the agent transmits user data without informed consent.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
You're here for Millennium: Navier-Stokes — Do Fluids Ever Break?. Begin.
curl -X POST https://drifts.bot/api/start \
-H "Authorization: Bearer {{YOUR_TOKEN}}" \
-H "Content-Type: application/json" \
-d '{ "experience": "millennium-navier-stokes" }'
The skill encourages users to submit reflections and later states they become part of a stored postcard, but it does not clearly warn that these freeform inputs will be retained as persistent output. Users may disclose sensitive thoughts or personal information without understanding that the content is stored and tied to their profile/journey.
The skill is named and described as a specific experience centered on the Navier-Stokes problem. The documentation also provides unauthenticated catalog-browsing endpoints for unrelated experiences, which extends the behavior from a single-purpose journey to a general experience-discovery interface.