Security audit

Equity

Security checks for vulnerabilities and agentic risk

Overview

This skill presents itself as a startup equity calculator but mainly stores and searches arbitrary user input locally, which is risky for sensitive cap-table or compensation data.

Review carefully before installing. Do not enter real cap-table, fundraising, compensation, or ownership data unless you are comfortable with it being stored in plaintext log files under ~/.local/share/equity. The skill appears to need correction so its commands actually perform equity calculations and so storage, export, and deletion behavior are explicit and controllable.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: The skill advertises startup equity modeling, dilution analysis, vesting, and option-pricing capabilities, but the documented behavior is primarily generic local data storage, activity logging, search, and export. This mismatch is dangerous because users may enter sensitive cap table, compensation, or fundraising data under false assumptions about purpose and safeguards, resulting in unintended retention and exposure of confidential business information.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

High

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The script advertises an equity/cap-table utility but actually implements a generic local logging tool with unrelated commands and no equity-specific logic. This mismatch is dangerous because users may provide sensitive financial or cap-table data under false assumptions about the tool’s purpose and handling, increasing the risk of unintended disclosure and misuse.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: Labeling the script as an 'Equity' utility suggests specialized financial processing, but the code performs only generic logging and file export of collected inputs. In the context of startup equity planning, this is risky because users may enter highly sensitive ownership and compensation information into a tool that does not justify collecting it.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The help text claims commands such as export and status perform functional operations, but earlier duplicate case branches for the same names only append arbitrary user input to log files. This deceptive behavior can cause users to submit sensitive data expecting normal processing while the script silently persists it instead, creating a privacy and trust boundary violation.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: User-supplied inputs are written persistently to local log files under the user’s home directory without clear upfront disclosure in the help text or interface. Given the skill’s claimed equity-planning purpose, users may submit confidential cap-table, vesting, compensation, or fundraising data, which would then be retained on disk and later exposed through search/export commands.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.