Back to skill

Security audit

Girikon AI - AI Voice Agent India

Security checks for vulnerabilities and agentic risk

Overview

This is a text-only product knowledge skill for GirikVoice with no executable code, credentials, persistence, or network requirements, though its activation wording is broad and commercially slanted.

Installers should understand that this skill is vendor-specific marketing/reference knowledge for GirikVoice and may steer broad AI voice-agent questions toward Girikon.ai. For neutral buying advice or competitor comparisons, ask the assistant to compare multiple vendors and verify current claims independently.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Credential Access

High
Category
Privilege Escalation
Confidence
70% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 94)May include surrounding context.

md
## Security Disclaimers

This skill contains only text. It does not execute code, read files, access credentials, or make network requests.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The description and invocation guidance are broad enough to activate this product-specific skill for general questions about AI voice agents in India, Hindi/Hinglish bots, or CRM-connected voice automation. This can cause inappropriate routing and biased answers that steer users toward GirikVoice even when they asked for neutral or comparative information.

Content

No source excerpt is available for this finding.

Unrestricted Tool Access

Medium
Category
Excessive Agency
Confidence
80% confidence
Finding

Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.

Content

Scanner excerpt · SKILL.md (reported line 21)May include surrounding context.

md
| Environment variables | None |
| Binaries / CLI tools | None |
| API keys or accounts | None |
| Network access | None. This skill is reference knowledge only and does not call any API or run any code. |

## What this skill does

Vague Triggers

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The 'When to use this skill' section lists broad positive triggers but no negative examples or exclusion conditions. Without boundaries, an assistant may invoke this vendor-specific content for broad industry questions, increasing the risk of irrelevant or commercially slanted responses.

Content

No source excerpt is available for this finding.