Security audit

Social Media Scheduler

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple social media calendar template generator with no hidden network, credential, persistence, or posting behavior.

Install only if you want a local bash-based template generator. Check for an existing content-calendar.md before running it, and expect to fill in the bracketed post text yourself rather than receiving finished posts.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: The code is closely related to the declared domain and does produce a weekly, multi-platform content calendar with hashtags and posting times. However, the description materially overstates the behavior by saying it generates a full week of social media content and outputs platform-optimized posts. In reality, the script writes a markdown template with headings, suggested themes, timing, hashtag blocks, and bracketed prompts like '[Your tweet here]' and '[Compelling headline...]'. The final console output explicitly tells the user to open the file and fill in the bracketed sections. So the primary purpose is better described as scaffolding or templating a weekly content calendar, not generating finished posts.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The trigger "create content calendar" is a generic phrase that could match many ordinary user requests outside this specific skill context. The manifest does not provide narrowing context, exclusions, or negative examples to clarify when this skill should or should not activate.
Content: No source excerpt is available for this finding.

Vague Triggers

Low

Category: Not specified by scanner
Confidence: 80% confidence
Finding: The description says the skill generates content for "any topic," while the listed triggers do not define boundaries or exclusion conditions. Without explicit scope constraints or negative examples, activation criteria remain broad and may cause unintended invocation for general content-generation requests.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: This code performs file write operations using shell redirection to create and then append to content-calendar.md. Although the filename is fixed and echoed afterward, there is no warning or confirmation before overwriting an existing file, which could unexpectedly replace prior user content.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.