dlt-probability-analyzer

• Outcome: Review
• Latest audit: Oct 14, 2026 · 8:21 AM UTC
• Version: 2.1.56

Overview

This skill appears intended to generate lottery analysis reports, but it also includes broad local automation, scheduled-task coordination, and cross-install file syncing that users should review before installing.

Install only if you are comfortable with a local Python workflow that fetches public lottery data, writes report files to your Desktop, and may inspect or synchronize WorkBuddy skill directories and Windows scheduled-task state. Prefer manual/offline runs unless you explicitly want the scheduled-task/watchdog maintenance model.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (198)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 97% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence

Finding

The manifest presents the skill as a lottery assistant, but the documentation reveals materially broader behavior: local file scanning, persistent report generation, desktop copying, scheduling/watchdog workflows, subprocess execution, and maintenance/QA operations. This is dangerous because users and platform controls may consent to a narrow interactive helper while the skill actually performs broad host-level actions with persistence and file-system side effects.

Content

No source excerpt is available for this finding.

Static analysis

Detected: suspicious.insecure_tls_verification

HTTPS certificate verification is disabled.

Warn

• Code: suspicious.insecure_tls_verification
• Location: scripts/lib/dlt_outlet_map.py:37