Back to skill

Security audit

World-Class DJ Skills Playbook

Security checks for vulnerabilities and agentic risk

Overview

This is a DJ coaching reference skill with broad but disclosed DJ-topic activation and no code, persistence, credential access, or hidden data handling.

Before installing, understand that this skill may be invoked for a wide range of DJ-related conversations. It appears safe and informational, but users who prefer narrow skill routing may want the trigger wording tightened.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

High
Category
Not specified by scanner
Confidence
98% confidence
Finding

The trigger scope is extremely broad: it activates on essentially any DJ-related topic and even says 'If in doubt, use this skill.' That can cause unintended invocation in loosely related conversations, increasing the chance the agent applies rigid skill instructions when not appropriate and overriding better-scoped behaviors or safer domain routing.

Content

No source excerpt is available for this finding.

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
80% confidence
Finding

Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Content

Scanner excerpt · references/full-playbook.md (reported line 97)May include surrounding context.

md
| Seamless Fade Mix | Beginner–Inter | Gradually blend by cross-fading volume and EQ over 16–32 bars. Safest, most universal. |
| Quick Cut | Beginner–Inter | Instant switch at a phrase boundary. Energetic, punchy. Signature of hip-hop and open-format. |
| Spinback | Beginner–Inter | Reverse-spin outgoing track, immediately drop incoming. Drama and energy. Easy crowd reaction. |
| Power Cut (Dead Stop) | Intermediate | Cut mid-phrase without warning. Moment of silence before new drop. Borrowed from vinyl technique. |
| Loop Mix (Infinite Loop) | Intermediate | Loop the outro (4 or 8 bars) to extend the blend window. More time for precise mixing. |
| Tempo Transition Mix | Advanced | Gradually shift BPM during blend to move between tempo ranges. Bridge between genres. |
| Filter Sweep | Inter–Advanced | Hi-pass or lo-pass filter to gradually remove outgoing track. Smooth and hypnotic. |

Static analysis

No suspicious patterns detected.