Security audit

Agent Team Workflows

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed markdown workflow guide for user-confirmed multi-agent coordination, with no executable payload or hidden data handling.

Install only if you want Claude Code Agent Teams workflows. Review the persistent settings change before applying it, confirm scope before any team is spawned, and avoid sharing sensitive inputs with multiple teammates unless the task requires it.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Rogue AgentSelf-Modification, Session Persistence
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration

Findings (3)

Agent Config Directory Access

High

Category: Agent Snooping
Confidence: 93% confidence
Finding: The skill instructs the user to modify ~/.claude/settings.json, which touches the agent configuration directory and can alter trusted runtime behavior outside the immediate task. Even though the specific setting enables agent teams, directing users to change persistent config increases risk because a skill can normalize privileged configuration changes and create a path for broader capability enablement.
Content: Scanner excerpt · SKILL.md (reported line 12)May include surrounding context.
Prerequisites

Agent Teams must be enabled. Add to ~/.claude/settings.json:

json
{

Session Persistence

Medium

Category: Rogue Agent
Confidence: 60% confidence
Finding: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
Content: Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.
md
--- name: agent-team-workflows description: "Universal multi-agent workflow orchestration using Claude Code Agent Teams. Use when user asks to run a team workflow, create an agent team, or coordinate parallel work across multiple teammates — for any domain (software, content, data, strategy, research, etc.)." --- # Agent Team Workflows

Vague Triggers