Back to skill

Security audit

MIDI Piano Roll Renderer

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local MIDI-to-image renderer with purpose-aligned Python scripts and no evidence of hidden network, credential, persistence, or destructive behavior.

Install only if you are comfortable running local Python scripts and installing the disclosed mido and Pillow packages. Treat the output path as user-controlled, since the script will save a PNG wherever that path points, but the inspected artifacts do not show hidden or unrelated access.

Vulnerability Patterns
  • Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (24)

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
,]2�Q��էc
�v�@{nS�cG�k
YB�ʶ�N�SƇ\�sý]�/�U>
�/08��D`c�ԥcG�_Wd#���r�-��p2fTb����''ם�
321zd�yD��6���ןX,��
�|З
z��U2���|[G�����%�ten���e}�斬��B��d�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
�|З
z��U2���|[G�����%�ten���e}�斬��B��d�
��~`N�'��}�C�o�g��p��������߶�}:]
r��i�|���
�yi~��
�Z�"�����ϼ�iw(�d"����8r�b�
P�b���C�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
���1����
���}�u
AE�2>y����쐞1�j��"���;aU��g��or�`�Q>�s��TU��,kɿ�
#��7?1�C�����O~o������2���
��+g�<�KM���2p{�]~kg����q>�x�Q
������Cs3�=�F@O��֙�'�z=�
���y��=W�2�.�������| Zn�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
������Cs3�=�F@O��֙�'�z=�
���y��=W�2�.�������| Zn�
��wJ7�
_^��}_��ʠB�b�.�k>�o��[����t`�c�ޕ?��e�Ͽֻten̨0�2����@E:���tu��Vy��Y�<.���T��+D}:v��k��5O
y���df�
����/DK`c@
�[m1���L!�D;nV��5n��⭕�XG����vJ�8�&��6�r����0h�M����ߔQ�J-�������r=�����s�z�5����[�H�oN���פb���ʶܫ
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
��wJ7�
_^��}_��ʠB�b�.�k>�o��[����t`�c�ޕ?��e�Ͽֻten̨0�2����@E:���tu��Vy��Y�<.���T��+D}:v��k��5O
y���df�
����/DK`c@
�[m1���L!�D;nV��5n��⭕�XG����vJ�8�&��6�r����0h�M����ߔQ�J-�������r=�����s�z�5����[�H�oN���פb���ʶܫ
���{ߜ���fr�`Hk���(��������L�=�������U���ǯ�{�
5s]����Ô׀50_(��@�6�7qLb�Yա���V���M�S����5���XG��}�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
�[m1���L!�D;nV��5n��⭕�XG����vJ�8�&��6�r����0h�M����ߔQ�J-�������r=�����s�z�5����[�H�oN���פb���ʶܫ
���{ߜ���fr�`Hk���(��������L�=�������U���ǯ�{�
5s]����Ô׀50_(��@�6�7qLb�Yա���V���M�S����5���XG��}�
�A@y�ł�]w��
�ƾ�.�Q�1�ӧT�{�U#
�G��j_�g.�Dp�~�ݿ~B󛛭O����u�%wڢ��C-����΋o���ս�>�_]Cm��̿��#�����W{�{W�=��NL֥c��C�s�7
�_��ۅ�`X�n���3Cf�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
�t

9���Z�Cn��욨���۔(f_� �y����/������
i�
����k^RI�䬚/

�����y�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
i�
����k^RI�䬚/

�����y�
��<�}yA_PA�{¨�v)�C��
Pu鐟��!���ώ�����_
.���i�r�ԛ�rBs�_]�v��X�O��6i��?l��1�B���i�UT�x(S�̈́;p���������Ƚ�a�����߶~���_|���VN��}��ѬW��t_��J%1_�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
�V͞�r.+RWOᡧ�;m^
��i���}����n�����Ͽ��ڑ���7��'�Nl�q��[��i���Pq�.�cBf@{6��S��
;�
�e�0�6"S
��Xo_P1�~��š#�㧟8�����O��=؝�(W�z |��#6�
�V����.]�@
Pi.��s��_��s�;�:�#n6^y�	͉��w���z�x�'�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
(T[��w��
s`CM*������
��

7=���w�u*�P�ι���E6ڻ�ǜ��/
l��
[�̘R��W��|_ī5`H0_����؈L�7�U!�Y��'_�>�܀��i���k��_jz��=e���[g\e����XG�yd��S���_~[�Mn���}s^���Cw�p�C�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
g'Q^�7W��

Ï�B��/���Fd2ِs�ښJ���8�u6��b�̮���G���q7�d�>�8{F*��F)�"եc��<yl"t
�?��������,�vȊ�L�����%�ݿ��&��
���s�������f=J�;
z*S��^�2��o,{cgF��R�i��M7H�;v����w)��pd��/�
�RiQ�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
}{TC���=����1����
�p��c�����
5b��C޿ 
c]��d�_
=k��b���}
�
wu��G�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
?S�2�bK@<�T�/-9�sM�OO���U���h�w�ړ�Z����Ru���q򑍟���
������=<V��G|u�S3�
�[���!�4]qgW15�r��]8
���r��{vH�}zl��>�^֒{hn��G{��hOK�U�Q��Kn��o]�
�������EmPX({���;�yb
�;�3�����cwv����u���&dy��l��{vL?�/
O�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
O�
%'�Q��i�������ܑ__ź��~_c��de.6����1_������.U*��~g�z_C1��Ap�
?�}[1-PI������'(�
λ�=�
��/�*v�������u�驭gUϞ��|z�yd�������k�ϼ�;��ߟʾ�p�U��g~�"W��u�]�7{�#=3�
����\���?�
�s��;���U���0��
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
'�]����yȗ�
��%��s�+E�����Y'7U%KP�c�c}���:vd1-��/��F��A�Zy
��1���,�Y�T���ʄ�F���~���������ޟ^޶�g����g^����2�A٢b������wb���;�~��Q�"�"�����V[�7�u˚����{23煬s
�0�ͬT�,Sa���G�*ɬ�s�����t��3e|r����q�����4��k:���ڼz��jv۪fD�f�>qp�%7v��
�
��g���
/"�q��
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
/"�q��
g\�e��'
�������	q��:�
lC��@�؈ң���!����wm�ug�j���t_�M�u'��VU�}z��j�6%"���wo[s��ݑ��Z���}���>7*Q�?�7W����>X��6��=3�f�?�}���a�*�k�0��'��l�
M�
ee���
.ۓ
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
�0��?�>ܱ�,�(!��r#����UB�S�7��/�|=��Uwu
��%G���g#�92�!>il"��`ִ���
ѱ�r��o�6�&UTZ��ߵF�)*�'�+�Q_-
����U7}�0��[;�=U���R1_(7����6%��n�^ۦ��NźN��,���V�u�l*�ݙ�q򑍳g���5��z�
R�Ҝ�."�q���déU�oU�
�������_Jn�M�O;~���qo�	�/}dD�co{�'���C�|�
	lD쩗{_^�WL
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
_=zD1
���k��z�R�	�0z�+lD8��nYs�{�o�5���Xo4��o��O�ָDm
��	E��8��\��#@�����Uw��ǝ~��wodC��_][��M�uE�#��`�P�6�w��E��'�I|����S��/�
�e�]�/4�(�*�`#]�E�Xg\��ό���!��c���Suᷚ�·������Iɽ�Y�}��UwY{
@�J�ۣ�������߻km�p�[�kJ\���
&'�
���}�>���3��|�<	lD�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
��Z�����n���0�`i��:KU�"���`�cA}��K�>
��WG��^�pi���L�����F�j?\����`
�?�!
�V��v���
��V�qҨ�Ο𣓛vݲ&�(��wo[s���Z/|��m/r�@I�/����{p�_�{���Z�ǂ�>״~��
����~G�x�'�����F�M,jp��G'7��dH+�X��:���yd�[�\�q��k2il���j����n
�#
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
�tu쀝ҿ���{Ν���F
�k�ئ~<��ǂ�6���[Ϳ���b
�.Z�����Ї���@��
��%7vn3����ӱ�Ni>��e�.ꋮ_kޢ�\>H��uv�y��������3}J������[Ǎ�m�aZ���c�V��y\��Ʌ�Ik�V�;�!����ѝ�U8CCSc��]k�uULq���ܗz�z9�����%}
��:�
�=�޾Bu*�P�ԜX��3�wݲ���ƿ�qq��T�Pd�P�6ĭv��z_�%2&�I\���cN[�ܼ�`P��8j����¹W�CJ.��
�P�ڻ�z>�tené�.�����W��R��G6~`��`�*�X��ئ�E�n�8�����/j��KT��M�Cw
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
�P�ڻ�z>�tené�.�����W��R��G6~`��`�*�X��ئ�E�n�8�����/j��KT��M�Cw
Y^���𻛔�`H?:1~tb�miC���dn�Wy
`�1_(g���gM
����"�<4�L��{c�=����7{F��ό��W�;�aD}���5fT��*d�W�Uua�0��MMU2L��}o�	�5�X	��?�
��[�SƇe��zi
��'�O��=~�-�m�נ����]��oZJ�
�0�ʙ��@�������N�:v��F��
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Context Window Stuffing

Medium
Category
Memory Poisoning
Content
M�#���&�Gďگ������1�R.BP��1
��g_-��ɋ��
�P�?��˧�h���᭄c�o#��V�IE�5��[�5X+��G�-���-\x���%��_�|ua�<��@�
���w��g\���/5Er���!���5���y��
�ZrE�6zD|��k��6��5�Hc '�8vT⚻��>7�/�cD}����
��Wxi~Q7\�-��'�p�}]��ku����׎���|3��X���.~�7�gL�
��E���1֧�C�u�
Confidence
80% confidence
Finding
Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Tool Parameter Abuse

High
Category
Tool Misuse
Content
�����gu^�7���z�10z83C
�V]�'�w_3�]}�����{�)��7��ᯝ��C��{K�~˙򦬤���ǝ��涾;Vu�zߞUOt5�����⢂7.j���Sk������'�s�?��"fȿ��o]:�Kǥө���y�k�S�O�нugﮦ���t__j������y��_����������Oo__ꟾ�6��'ib�)(H͞^<{z�[N��/��[;��ԛ�_�p�
���z���=߫ ���a4����7_m�3�Ic��dζ�éH�1è�����yۮ�z�3��/~*q#��U�^�1����s=�r˖�J`�3�6�t�ڟn���J:�|D&�h&fU
Y�������і9s��{-
/1�(qߚ�/gӭ�6�{!�1C
|���w>�q�Q���.�]RZR0�_��7���;�o�����vu��f�1D̐m{ҷ��s��=�T��(5wF��C�g����UM�)��*�(-(+-(-y��T��;��3���W�лugoG��?��ʇ��ii�Z�1J̐g����6u?�����j��ݳ�u�@��^�P� $1�$f���
��B3@Hbɇf���������
Confidence
85% confidence
Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High
Category
Tool Misuse
Content
��+��a f��{�y�
�;���J�-�<$�ҒA'gn��3�\3@n�1;q������mfC�����
䖘���A׏
�Of���'{r�87�
0��t�Y����g���3k~�Jo�cۣ�
���Z0&83
�]��I�e���v�k��4k ��
Confidence
85% confidence
Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Static analysis

No suspicious patterns detected.