Security audit

Burnout Recovery

Security checks for vulnerabilities and agentic risk

Overview

The skill is coherent and not malicious, but it asks the agent to persist sensitive burnout, workplace, and reflection data without clear consent, retention, or deletion controls.

Review before installing. This skill may store burnout scores, workplace boundary details, reflections, activity patterns, and possible job-exit decisions across sessions and in a local plaintext file. Use it only if you are comfortable with that persistence, and prefer explicit opt-in, a private storage location, and a way to inspect and delete saved data.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:13
Finding: Unpinned Package Execution Through npx
Content: View full analysis
Remediation: View remediation
install howtousehumans/burnout-recovery" ``` 2. Pin the installed Skill or artifact version as well, if the CLI supports that option. 3. Use a lockfile and registry-provided integrity hashes where supported. 4. Obtain packages only from an explicitly trusted registry. 5. Verify package signatures, checksums, provenance attestations, or published integrity metadata before execution. 6. Disable package lifecycle scripts where compatible with the installation process. 7. Run installation in a restricted environment with minimal filesystem, credential, and network access. 8. Periodically review the pinned version and its transitive dependency tree before upgrading. ]]>

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:42
Finding: Persistent Plaintext Storage of Sensitive Mental-Health and Workplace Data
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Rp1

Medium

Category: MCP Rug Pull
Confidence: 87% confidence
Finding: The install command uses npx clawhub without pinning an exact package version, which means future installs may resolve to a changed or compromised package. In a skill ecosystem, this creates a supply-chain risk because users may execute whatever code the latest package version serves at install time.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill instructs the agent to write user-customized content to ~/documents/burnout-recovery/boundary-scripts.txt without first obtaining explicit user consent or warning that a filesystem write will occur. Because this skill handles sensitive mental-health and workplace information, silent persistence increases privacy risk and may store confidential personal or employment details on disk unexpectedly.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.