Back to skill

Security audit

Rune Wisdom

Security checks for vulnerabilities and agentic risk

Overview

This is a static rune reference skill, but it includes practical medical, blood/fire ritual, curse, and coercive romance material that should be reviewed before use.

Install only if you want an esoteric rune reference and are comfortable reviewing or constraining it. Do not rely on it for medical diagnosis or treatment, do not follow blood/fire/toxic-herb ritual steps, and do not use it for curses, coercion, or manipulating another person's feelings or choices.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (69)

Harmful Content Injection

Critical
Category
Prompt Injection
Confidence
95% confidence
Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · references/norse-eddic-sagas.md (reported line 657)May include surrounding context.

md
---

## 1. Witchcraft as Skill and Craft

The attitude of ancient Scandinavians toward the ability to practice magic was remarkably pragmatic. Pagans often treated it as an additional skill a person possessed. This applied equally to men and women. Examples from the sagas:

- **Torgunna** in the *Saga of Eirik the Red*: "Leiv took a liking to a woman named Torgunna there. She was of noble birth and, as Leiv understood, skilled in witchcraft" — note the casual, descriptive tone.
- **Svan** in the *Saga of the People of Laxárdalr*: "Svan was very skilled in witchcraft... He was of heavy temper and hard to deal with" — skill noted alongside character, not as a supernatural aberration.

Despite this pragmatism, witchcraft was not an especially honorable occupation. Sorcerers and witches were sensibly feared and not trusted. This negative attitude intensified with the arrival of Christianity.

Harmful Content Injection

Critical
Category
Prompt Injection
Confidence
90% confidence
Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · references/rune-mantic-layers.md (reported line 779)May include surrounding context.

md
---

**Shi School:**

- **Direct meaning:** Passive protection — "don't touch, you'll cut yourself"
- **Dark application:** Can be used to send a person **wariness, excessive anxiety**
- **Combination:** Raido+Algiz — a protected journey
- **Tree:** Rowan (рябина)

---

Harmful Content Injection

Critical
Category
Prompt Injection
Confidence
88% confidence
Finding

Referencing hemlock as an herb correspondence in an occult/practical ritual reference is risky because hemlock is highly toxic, and readers may incorrectly treat listed correspondences as suggested materials for ritual use. The broader skill context includes hands-on ritual instructions and herb mentions, which makes the inclusion more dangerous than in a purely historical or toxicology context.

Content

Scanner excerpt · references/rune-meanings-elder-futhark.md (reported line 874)May include surrounding context.

md
- Element: Water (as ice) (Skill compilation) / Water (RuneDictionary)
- Color: White / Pale blue (Skill compilation) / White, Pale Blue (RuneDictionary)
- Crystal: Clear Quartz, Selenite
- Stone: Clear quartz
- Tree: Alder
- Herb: Hemlock
- Number: 11

**Pennick's Interpretation (Магические алфавиты):**
*Is as the primal ice of stillness and concentration, the germ of form within frozen potential.*
Одиннадцатая руна — Is или Isa, фонетически [и]. Она означает «лед», воплощая в себе принцип статического существования.

Missing User Warnings

High
Category
Not specified by scanner
Confidence
99% confidence
Finding

The document provides repeated disease-specific healing claims and self-treatment directions with no medical safety warning, including advice for fever, infections, skin disease, and other conditions. This creates a foreseeable risk of delaying care, misuse by vulnerable users, and harm from relying on ineffective treatment claims.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

High
Category
Not specified by scanner
Confidence
97% confidence
Finding

These passages present practices to open hearts, turn hatred into love, and obtain romantic compliance from another person. That crosses from cultural reference into actionable coercive manipulation, and the skill context does not justify providing consent-undermining techniques.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

High
Category
Not specified by scanner
Confidence
99% confidence
Finding

The affirmation promising that no woman will reject the practitioner explicitly endorses coercive romantic control and normalizes non-consensual influence. Because the file is an operational guide, users could directly appropriate this text for manipulative behavior.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

High
Category
Not specified by scanner
Confidence
96% confidence
Finding

The Ljódatal summary explicitly maps verses 163–165 into practical 'win a maiden's affection' and 'secure reluctant maiden' guidance, which endorses coercive, non-consensual romantic manipulation. Because the broader skill is designed for runic divination and magic use, this framing materially increases the chance the assistant will help users pursue emotional control or sexual coercion under a spiritual pretext.

Content

No source excerpt is available for this finding.

Missing User Warnings

High
Category
Not specified by scanner
Confidence
98% confidence
Finding

This file gives extensive disease-specific treatment protocols, contraindications, timing, dosing-like instructions, and herbal regimens for real medical conditions without a prominent, repeated warning that the content is not medical advice and must not replace professional care. In a conversational agent skill, this creates a material risk that users will rely on ineffective or unsafe occult remedies for serious conditions such as thyroid disease, pyelonephritis, atherosclerosis, fever, or inflammatory disorders, delaying evidence-based diagnosis and treatment.

Content

No source excerpt is available for this finding.

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
80% confidence
Finding

Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Content

Scanner excerpt · references/norse-cosmology.md (reported line 1680)May include surrounding context.

md
### The Norns (Urðr, Verðandi, Skuld) — The Weavers / Пряхи Судьбы
**Domain:** Fate, time, wyrd, karmic debt **Archetype:** Threefold Mystery (Crone–Maiden–Warrior)
**Runes:** Perthro, Nauthiz, Wyrd (blank rune) **Practical:** Offer handmade threadwork (steatite spindle ideal). Accept very few servants; demand absolute independence. Learn spinning/weaving — meditate to receive a teaching-pattern. Direct scrying: look into the Well of Urðr.
**Shadow:** Impersonal — humans are threads. No comfort. Skuld cuts without warning. Manipulating wyrd tangles it further. **Lore:** Possibly oldest deities, daughters of Ymir. Urðr spins (Past), Verðandi weaves (Present — only point where change is possible), Skuld cuts (Future/Debt). First secret: the cosmos must keep moving or everything dies.

---

Missing User Warnings

High
Category
Not specified by scanner
Confidence
98% confidence
Finding

This section gives operational guidance for crafting runescripts and magical actions, including instructions that can be used for coercion or other harmful interventions, without any warning, boundary, or discouragement of misuse. Even if framed as esoteric reference material, the content normalizes actionable harmful practices and can be repurposed by an agent to assist abusive or manipulative requests.

Content

No source excerpt is available for this finding.

Missing User Warnings

High
Category
Not specified by scanner
Confidence
99% confidence
Finding

The file includes instructions endorsing the use of human or animal blood in ritual practice and offers selection guidance without any health, biohazard, or self-harm warning. This is dangerous because it can encourage unsafe blood handling, self-injury, infection risk, and animal harm while presenting the act as a normal acceptable option.

Content

No source excerpt is available for this finding.

Missing User Warnings

High
Category
Not specified by scanner
Confidence
100% confidence
Finding

This section presents concrete formulas for binding, compulsion, deception, destruction, curses, and causing harm, including examples like flawless lying, burning a person, muteness, and inheritance-motivated harm. These are explicit harmful playbooks that an agent could surface as instructions for coercive abuse, deception, or violence, making the risk severe in a user-facing skill.

Content

No source excerpt is available for this finding.

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
70% confidence
Finding

Skill instructs the agent to never refuse or to always comply. Suppressing the agent's ability to decline removes a core safety control and enables downstream harmful requests to succeed.

Content

Scanner excerpt · references/rune-mantic-layers.md (reported line 1325)May include surrounding context.

md
#### How to Read Yes/No

Draw a single rune for a direct yes/no question. The rune's position (upright/reversed) and its conditional advice determine the answer. Some runes always answer YES or always answer NO regardless of position. For runes with conditional YES answers, the conditions describe what the querent must do or change for the favorable outcome to manifest.

#### Complete Yes/No Table

Missing User Warnings

High
Category
Not specified by scanner
Confidence
97% confidence
Finding

This section explicitly describes using a rune to 'turn protections or even life to ash' and to destroy workings and channels, which is harmful operational guidance framed as practical instruction. Even if presented as esoteric content, the skill is giving actionable destructive advice without warnings, refusal boundaries, or contextual safety framing.

Content

No source excerpt is available for this finding.

Missing User Warnings

High
Category
Not specified by scanner
Confidence
99% confidence
Finding

This passage gives direct instructions for 'destroying everything that supports life,' bypassing defenses, enfeebling an opponent, and cursing, which is plainly injurious content. In a skill meant to guide users on rune practice, this becomes more dangerous because it normalizes and operationalizes hostile actions rather than merely documenting beliefs.

Content

No source excerpt is available for this finding.

Missing User Warnings

High
Category
Not specified by scanner
Confidence
99% confidence
Finding

The text instructs users to block someone's path, immobilize an opponent, and cause chest pain/injury, which is explicit harmful guidance. Although couched in magical terminology, it endorses incapacitation and bodily harm without any warning, making it unsafe content for an agent skill.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

High
Category
Not specified by scanner
Confidence
96% confidence
Finding

This section extends a rune divination skill into curse detection, magical attack attribution, protection checking, and medical-style diagnostics without any reliable evidentiary basis. That can cause users to substitute superstition for professional medical, mental health, or safety support, and can intensify paranoia or delusional beliefs by framing unverifiable harms as actionable facts.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

High
Category
Not specified by scanner
Confidence
98% confidence
Finding

These instructions tell the agent to provide concrete treatment protocols, therapeutic actions, and disease-oriented interventions derived from rune/healing systems. That is unsafe medical scope expansion for a divination skill and could lead users to follow ineffective or harmful advice instead of seeking evidence-based care.

Content

No source excerpt is available for this finding.

Missing User Warnings

High
Category
Not specified by scanner
Confidence
98% confidence
Finding

The activation instructions include bloodletting, burning, alcohol ignition, candles left overnight, smoke/herb exposure, and body-fluid handling with little or no concrete harm-minimization guidance. These are directly actionable self-harm, fire, contamination, and poisoning risks that an agent could relay to users as practical ritual steps.

Content

No source excerpt is available for this finding.

Ssd 4

High
Category
Not specified by scanner
Confidence
96% confidence
Finding

The section describes a symbolic sequence for binding a named woman using repeated symbols in a circle, framed as operative black-art practice. That is effectively an example of targeted coercive spell instruction, which meaningfully increases misuse risk despite the occult framing.

Content

No source excerpt is available for this finding.

Ssd 4

High
Category
Not specified by scanner
Confidence
97% confidence
Finding

The text explicitly describes using a rune like a 'vacuum dome' to confine a person so nothing enters or leaves, which is a direct coercive-use narrative. In context, this can be interpreted as endorsed containment, domination, or isolation of a target, making it one of the clearest harmful operational passages in the file.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The manifest description contains very broad activation cues such as Norse/Germanic spirituality and rune-related topics, which can cause the skill to trigger in conversations that are only loosely related to its intended function. Over-broad routing is dangerous because it can unexpectedly steer users into occult/divination guidance, increasing the chance of inappropriate responses, policy mismatch, or user confusion about why this skill was invoked.

Content

No source excerpt is available for this finding.

Ae4

Medium
Category
analysis-evasion
Confidence
80% confidence
Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The file frames ritual, breathing, healing, and energetic practices as practical knowledge while omitting a clear upfront safety disclaimer. That increases the likelihood that readers treat speculative occult methods as recommended real-world practices.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

This section gives quasi-medical healing claims and self-treatment directions for conditions like immune dysfunction, fever, infections, and neurological issues without evidence or clinical safeguards. In a spirituality/divination skill, such advice can displace legitimate medical care and encourage unsafe self-treatment, making the context more dangerous rather than less.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.