Security audit

MindForge

Security checks for vulnerabilities and agentic risk

Overview

MindForge is an instruction-only self-help skill with no system access, but it includes prescriptive addiction and emotionally intense coaching that users should treat cautiously.

Install only if you want coaching-style self-improvement prompts. Do not treat its addiction, withdrawal, burnout, or mental-health-adjacent guidance as medical or clinical advice; seek qualified help for substance withdrawal, severe distress, suicidality, trauma, or worsening symptoms. Technically, the skill is low risk because it is markdown-only and requests no data or system access.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Vague Triggers

Medium

Confidence: 94% confidence
Finding: The skill description is extremely broad, covering common states like low energy, burnout, lack of motivation, and habit-building. In an agent routing context, this can cause the skill to trigger in many ordinary conversations, increasing the chance that users are funneled into prescriptive mental-health-adjacent guidance without clear scope limits or appropriateness checks.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: This protocol repeatedly uses emotionally intense prompts about regret, deathbed reflection, shame, disappointment, and identity collapse without any warning, pacing guidance, or advice to stop and seek support if the exercise becomes destabilizing. In a self-help skill explicitly aimed at users dealing with procrastination, addiction, burnout, and low energy, this can worsen distress for vulnerable users and may trigger rumination, hopelessness, or acute emotional overwhelm.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: This file gives concrete addiction-recovery guidance, timelines, and intervention steps in a health-related context without a clear disclaimer that it is not medical advice and without directing users to professional help for severe symptoms. In a self-help skill aimed at people with addiction, burnout, and low motivation, users may rely on the material in place of evaluation or treatment, which is risky because withdrawal severity varies and some substance withdrawals can require urgent medical supervision.

Static analysis

No suspicious patterns detected.