Security audit

Skill Auditor

Security checks for vulnerabilities and agentic risk

Overview

This skill is a plausible local skill auditor, but it asks to inspect session logs and generate cleanup scripts without enough privacy and confirmation boundaries.

Install only if you are comfortable with an auditor reviewing all installed skills and potentially accessing local usage/session history. Prefer running it with a narrow time window, aggregate usage data only, and dry-run cleanup; review any generated shell script before executing it.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:7
Finding: Unrestricted Inspection of Installed Skills and Local Session Logs
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The skill explicitly advertises generating cleanup scripts that can uninstall, disable, rename, or archive installed skills, which affects local files and system state, but the description does not clearly warn users about those potentially destructive actions. This increases the risk of a user invoking the skill without understanding that it may produce commands intended to modify their local environment, especially in a security-audit context where users may over-trust recommendations.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.