Security audit

Copywriting Master

Security checks for vulnerabilities and agentic risk

Overview

This is a Spanish copywriting guidance skill with no executable code, persistence, credential access, or hidden data handling.

Installers should understand that this skill is aimed at Spanish-language persuasive sales copy and may produce direct, urgency-driven marketing language. Review generated claims, testimonials, scarcity, guarantees, and regulated-industry copy for truthfulness and compliance before publishing.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

High

Confidence: 97% confidence
Finding: The activation description is overly broad and repeatedly says to use this skill 'SIEMPRE' for a wide range of loosely related persuasion, writing, and selling requests. That can cause the agent to invoke this skill in contexts where a narrower or safer skill would be more appropriate, increasing the risk of misrouting, overreach, and policy bypass through incorrect tool selection.

Natural-Language Policy Violations

Medium

Confidence: 88% confidence
Finding: The skill hard-codes a linguistic variant ('usar vos', Rioplatense tone) rather than defaulting to the user's language or asking for preference. While not a direct security flaw, this can override user intent, reduce transparency, and make the system behave unexpectedly, which is a quality and trust issue in agent behavior.

Natural-Language Policy Violations

Medium

Confidence: 96% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This file presents all instructional content in Spanish and does not provide any user opt-in, alternative language option, or justification for a Spanish-only constraint.

Natural-Language Policy Violations

Medium

Confidence: 89% confidence
Finding: This markdown file presents all instructions and examples in Spanish, including region-specific second-person forms like "vos/tú", but does not indicate that the skill is limited to Spanish-speaking users or provide an opt-in language choice. Under the language/locale policy rule, forcing a specific language without user choice is a natural-language policy concern.

Natural-Language Policy Violations

Low

Confidence: 88% confidence
Finding: This markdown file contains natural-language instructional content exclusively in Spanish, including localized voseo phrasing such as "vos" and "querés." Under the language/locale policy rule, forcing a specific language without user opt-in can be a policy concern when no justification or alternative language option is provided.

Static analysis

No suspicious patterns detected.