T09 · Insecure Skill Coding Practices
Warning
- Location
references/onboarding-flow.md:56- Finding
Plaintext Persistence of Sensitive Household Profiles
- Content
View full analysis
- Remediation
View remediation
Security audit
LighterLoad
Security checks for vulnerabilities and agentic risk
Overview
This instruction-only skill is coherent with its family-reminder purpose, but users should understand it stores sensitive household notes locally.
Install only if you are comfortable letting the agent keep local notes about family, friends, children, dates, preferences, and reminders. Keep the memory directory out of Git, shared folders, and cloud sync unless you understand the exposure; avoid storing school names, detailed health history, financial details, addresses, or full birth dates, and delete memory/people/ if you stop using it.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)
Autonomous Decision Making
Medium
- Category
- Excessive Agency
- Confidence
- 75% confidence
- Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Content
md ### Immediate: Holidays & Leave Calendar Before or during onboarding, populate the user's memory with local public holidays, school term dates (if they have kids), and annual leave optimisation strategies. This is public information — no approval needed. See [references/holidays-and-leave.md](references/holidays-and-leave.md) for the full approach. ### First Use: Onboarding
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The file describes ongoing monitoring and proactive assistance across highly sensitive personal domains including relationships, health, finances, parenting, and social history, but provides no privacy guardrails, consent requirements, data minimization rules, or restrictions on retention/sharing. In this skill context, the absence of explicit handling guidance is risky because the assistant is intended to accumulate intimate household knowledge over time, increasing the chance of over-collection, inappropriate inference, or unsafe prompting around sensitive data.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The onboarding flow explicitly instructs collecting and storing sensitive personal and household data about the user and third parties, including names, ages, relationships, health considerations, life context, financial renewal timing, and interaction history, but it provides no explicit privacy warning, consent guidance, retention limits, or access controls. In this skill context, the danger is elevated because the assistant is designed to accumulate longitudinal dossiers on family and social contacts over time, increasing the risk of privacy harm, unauthorized profiling, and exposure of people who may never have consented to being recorded.
- Content
Static analysis
No suspicious patterns detected.