other
Warning
- Location
SKILL.md:2- Finding
Misleading Package Claims and Unverified External Payment Solicitation
- Content
View full analysis
- Remediation
View remediation
Security audit
Landing Page Copy Kit
Security checks for vulnerabilities and agentic risk
Overview
The skill is only a Markdown upsell page that advertises missing paid materials and directs users to off-platform payment channels.
Install only if you are comfortable with a mostly promotional Markdown skill. Do not assume the advertised templates, examples, or scripts are included, and avoid paying or downloading follow-up files through external channels unless you independently trust the seller.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The skill's invocation guidance is broad and promotional, but it does not clearly define when the skill should or should not activate. In an agent setting, this can cause over-triggering on loosely related marketing or writing requests, leading the agent to inject paid-upgrade prompts, payment links, or irrelevant copywriting behavior into conversations where it was not explicitly requested.
- Content