Security audit

Charisma Research Loop

Security checks for vulnerabilities and agentic risk

Overview

This skill is coherent for recurring charisma brief generation, but it asks to send email, modify calendar entries, and update persistent workspace memory without enough user confirmation or scoping.

Review before installing. Use this only if you intend the agent to maintain a persistent charisma-insight ledger and have email/calendar write access. Require explicit recipients, calendar targets, event IDs, and confirmation before any send or calendar update, and consider moving the ledger to a skill-specific storage location.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:34
Finding: Unrestricted Access to Persistent Root Workspace State
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:45
Finding: Unconfirmed Email Transmission and Calendar Mutation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The skill description is broad enough to match many ordinary communication, psychology, or productivity-related requests, increasing the chance of unintended invocation. Because the skill also performs downstream actions like recurring delivery and stateful memory updates, accidental activation could cause the agent to read/write files and initiate message-sending behavior in contexts the user did not explicitly request.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill instructs the agent to send email and create or update calendar items without any requirement for explicit user confirmation at execution time. This creates a real risk of unauthorized external side effects, including sending content to unintended recipients, modifying calendar data, or generating recurring outbound actions merely from the skill being selected.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.