Back to skill

Security audit

Jobs Product Philosophy

Security checks for vulnerabilities and agentic risk

Overview

This is a non-executable educational product-strategy skill with some scope drift into market and macro context, but no hidden code, persistence, credential use, or unsafe authority.

Safe to install as an educational product-strategy reference. Treat its finance-adjacent market notes as informal context only, verify any current market or regulatory claims independently, and do not rely on it for financial, legal, or insurance decisions.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The skill explicitly states it does not provide financial or insurance advice, yet later includes investment-oriented market updates and macro framing. This inconsistency can mislead users and downstream agents into treating financially tinged guidance as safe educational content, increasing the risk of inappropriate reliance or policy bypass through mismatched labeling.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The activation examples are broad enough to match ordinary product discussions, which raises the chance of over-triggering the skill in contexts where it was not specifically requested. Overbroad invocation can inject unsolicited guidance, interfere with routing to more appropriate skills, and amplify the impact of the skill's scope drift into adjacent domains.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill's declared purpose is product philosophy and innovation guidance, but this section expands into investment and macro-financial analysis unrelated to that purpose. Scope drift is dangerous because it can cause the agent to invoke the skill in contexts where users receive unvetted financial framing under a non-financial label, undermining trust and guardrails.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The metadata states 'Language: 中文为主,英文关键术语保留', which imposes a default language behavior in the skill's natural-language description. Because no user choice or opt-in is described, this can conflict with language/locale policy expectations for skills that should not force a language by default.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

The manifest and primary description frame the skill as being based on Steve Jobs's product philosophy. The 'Jobs vs Musk Comparison' section introduces a second leadership/product framework and advises when to use each, which broadens the conceptual scope beyond the declared Jobs-focused methodology.

Content

No source excerpt is available for this finding.