T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:20- Finding
Plaintext Persistence and Unnecessarily Broad Loading of Sensitive Vehicle Records
- Content
View full analysis
- Remediation
View remediation
Security audit
Vehicle Os
Security checks for vulnerabilities and agentic risk
Overview
This vehicle-tracking skill is local and purpose-aligned, but it can save detailed vehicle, registration, insurance, and loan information in a JSON file.
Install this only if you are comfortable keeping vehicle records in a local JSON file. Avoid storing full VINs, plate numbers, insurance policy details, addresses, or loan information unless you need them, and periodically review or delete saved records you no longer want retained.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The skill description is broad enough to activate on many ordinary mentions of vehicles, repairs, or maintenance. That can cause over-invocation and unintended collection or retention of sensitive vehicle, registration, insurance, mileage, and service-history data when the user did not explicitly intend to use a tracking skill.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The persistence section instructs the skill to store detailed vehicle records, including VINs, registration, insurance, mechanic notes, and service history, but does not warn the user that this sensitive information will be retained on disk. In this context, the omission is risky because the skill is explicitly designed to accumulate long-term ownership and administrative data that could enable privacy harm, profiling, or fraud if exposed.
- Content