Security audit

Debt

Security checks for vulnerabilities and agentic risk

Overview

This is a plain-text debt-planning skill whose sensitive financial topics match its stated purpose and it does not include executable code or hidden access mechanisms.

Before installing, understand that using this skill may involve sharing detailed debt, spending, and credit-related information with the agent. Keep account credentials and full payment-card numbers out of the conversation, and treat creditor negotiation or payoff recommendations as planning assistance rather than a substitute for professional financial advice.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Anti-Refusal Statement

High

Category: Anti-Refusal
Content: This is the psychologically optimal strategy. It maximizes the frequency of wins. For a person who needs to see progress to stay motivated, who has tried and failed to stick to a payoff plan before, the snowball is the right choice. The additional interest cost compared to the avalanche is typically small. The difference in completion rate is enormous. The skill helps you choose. It runs both scenarios with your actual numbers and shows you exactly what each strategy costs in total interest and how long each takes. Then it recommends the one that fits your personality, your history, and your financial situation. And if you change your mind halfway through, it recalculates without judgment. ---
Confidence: 80% confidence
Finding: Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Static analysis

No suspicious patterns detected.