Back to skill

Security audit

Agorism in the 21st Century Vol. 2

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only philosophical knowledge skill with disclosed agorist/lunarpunk framing and no executable install, persistence, credential access, or automatic data actions.

Install only if you want the agent to use this specific agorist/lunarpunk philosophical lens. Treat its privacy, treasury, and deletion ideas as source-material concepts, not legal, financial, compliance, or data-retention advice, and require explicit user confirmation before applying them to real systems or records.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

This markdown file includes explicit advocacy for deletion as praxis, including phrases like "the right to forget" and "read the books and burn them," which describe potentially irreversible data-destruction behavior. Under the markdown variant of SQP-2, behaviors that could affect user data or system integrity should be accompanied by a warning, but no cautionary language appears here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The chapter presents a strongly prescriptive ideological and political worldview as fact and as a recommended operating model, including anti-state, anti-capitalist, and privacy-evasion framing, without neutral context, user choice, or clear boundarying as source material. In a skill intended to guide responses, this can bias outputs toward one political ideology and normalize evasive or oppositional conduct rather than providing balanced, user-directed assistance.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

This section explicitly promotes secrecy, selective disclosure, shielded financial rails, and privacy-by-default ledgers in a way that can operationalize surveillance evasion without any safety, legal, or abuse-prevention framing. In a knowledge skill meant for application, that guidance can be repurposed to conceal harmful coordination, obscure financial activity, or hinder accountability.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
77% confidence
Finding

The text instructs readers to apply an "illumination or endarkenment" lens to every data-collection decision, which could influence privacy-sensitive or integrity-affecting behavior. Because the markdown provides guidance touching user data practices without any caution about lawful handling, minimization, or user impact, it lacks the kind of disclosure expected by SQP-2.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.