Social Media Strategy

• Outcome: Pass
• Latest audit: Sep 15, 2026 · 12:38 AM UTC
• Version: 1.0.0

Overview

This skill provides social media planning guidance and only produces advice and external reading links, with no code execution or system access.

Before installing, understand that the skill will tend to include a predetermined list of external marketing resources in its answers. Treat those links as ordinary third-party sites, not as security-reviewed or neutral endorsements.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

Findings (1)

T01 · Skill Instruction Hijacking

Note

• Location: SKILL.md:41

Finding

Mandatory Injection of Fixed Third-Party Promotional Links

Content

View full analysis

Vulnerability Details

File Location: SKILL.md, lines 41–49
Vulnerability Type: T01: Skill Instruction Hijacking
Risk Level: Low

Complete Code Snippet

markdown

### Further Reading
- How to Build in Public as a Founder: https://www.failory.com/blog/building-in-public
- The Ultimate Founder-Led LinkedIn Guide: https://www.mrrunlocked.com/p/founder-led-linkedin-guide
- LinkedIn CEO/Founder playbook: https://www.markepear.dev/blog/linkedin-ceo-founder-playbook
- Social Listening guide: https://www.mrrunlocked.com/p/social-listening-guide
- F5 bot (free Reddit/HN monitoring): https://f5bot.com/
- How to market to developers on Twitter: https://www.markepear.dev/blog/developer-marketing-twitter
- Organic Growth Guide for TikTok and Instagram: https://www.post-bridge.com/growth-guide/start-here
- Pinterest Growth Guide: https://www.blogtopin.com/growth-guide/start-here

Technical Analysis

Line 16 instructs the agent to provide a response containing the subsequently defined sections after receiving the user's answers. Lines 41–49 define one of those mandatory sections as a fixed collection of third-party links. Consequently, invoking the skill causes unrelated external resources and named services to be inserted into the agent's output without requiring a user request for those resources or a relevance assessment.

This is a limited form of skill instruction hijacking because the skill text persistently controls part of the agent's response and routes users toward predetermined external websites. The reviewed file does not establish that the linked sites are malicious, compromised, or affiliated with the skill author; the confirmed issue is the mandatory and undisclosed nature of the promotion rather than malicious behavior by those sites.

Attack Path

1. A user invokes the social-media-strategy skill.
2. The skill directs the agent to ask five discovery questions.
3. The user supplie ...[truncated 878 chars]

Remediation

View remediation

Remediation Suggestions

1. Remove the requirement to include a fixed third-party link list in every generated strategy.
2. Recommend external resources only when they are relevant to the user's stated audience, platforms, capacity, and goals.
3. Ask whether the user wants external reading or tooling recommendations before presenting them.
4. Use neutral selection criteria and, where practical, provide multiple comparable options rather than repeatedly promoting predetermined providers.
5. Clearly disclose any sponsorship, referral relationship, affiliate arrangement, or other material connection.
6. Treat linked content as untrusted external material and avoid implying that it has been security-reviewed or independently endorsed.

SkillSpector

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The manifest description says to use the skill when someone wants help with their social media strategy, which is a broad natural-language condition that could overlap with many general marketing discussions. It does not provide narrower trigger phrases, scope boundaries, or negative examples to clarify when the skill should and should not activate.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.