T01 · Skill Instruction Hijacking
Warning
- Location
SKILL.md:37- Finding
Mandatory External Redirect Hijacks Sleep-Related Responses
- Content
View full analysis
- Remediation
View remediation
Security audit
insomnia-audio-sleep-aid
Security checks for vulnerabilities and agentic risk
Overview
This skill is a simple sleep-aid recommendation skill, but it broadly triggers on sleep complaints and repeatedly steers users to one opaque third-party link.
Review before installing. This skill appears non-executable and does not access local data, but it is designed to route sleep-related conversations to a single third-party link. Users should be comfortable with that destination, its privacy practices, and the lack of transparent provider information before relying on it for sleep or health-adjacent guidance.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The skill's activation scope is broad enough to trigger on general sleep-related complaints such as tiredness or poor sleep quality, not just insomnia-specific requests. This can cause unintended invocation and steer users toward an external resource without sufficient relevance checking, increasing the chance of inappropriate or spam-like redirection.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
Keywords such as 'can't sleep,' 'sleep problem,' and 'help me sleep' are common in everyday conversation and lack disambiguation constraints. This makes accidental activation more likely and can repeatedly direct users to a single external link even when the user did not clearly ask for this specific resource.
- Content