Free Dev Playgrounds

• Outcome: Pass
• Latest audit: Sep 14, 2026 · 10:12 PM UTC
• Version: 1.0.1

Overview

This skill is a disclosed LabEx playground recommendation helper with no code execution, credential access, persistence, or local system changes.

Install this if you specifically want quick LabEx playground links. Be aware it is not a neutral comparison tool, and security-tool playground recommendations should be used only for authorized defensive learning or testing.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

Findings (1)

T01 · Skill Instruction Hijacking

Note

• Location: SKILL.md:7

Finding

Vendor-Specific Recommendation and Output Hijacking

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• System Prompt Leakage: Direct Leakage, Indirect Extraction, Tool-Based Exfiltration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (5)

Direct Prompt Extraction

High

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.

Content

Scanner excerpt · SKILL.md (reported line 40)May include surrounding context.

md

- If the user asks for security tooling, prefer the named tool playground when available.
- If no exact match exists, recommend the generic catalog page and clearly say it is the closest available starting point.

## Output Rules

- Keep the answer short and practical.
- Prefer URL-first recommendations.

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 80% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 46)May include surrounding context.

md

- Prefer URL-first recommendations.
- Do not invent playgrounds that are not in `references/playgrounds.md`.
- Do not route users to course or lab URLs unless they asked for guided learning instead of a playground.
- Do not ask the user to install software locally if a suitable playground exists.
- Load `references/playgrounds.md` when you need exact URL, aliases, or category coverage.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

Because this is a markdown file, vague-trigger checks apply. The alias "automation" is a very broad everyday technical term that could match many unrelated user requests, making it unclear when the Ansible playground should be selected versus other tools.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 84% confidence

Finding

The alias "plotting" lacks sufficient specificity and may overlap with many common data-science or spreadsheet-related requests. The file does not provide constraints or exclusions clarifying when this should map to Matplotlib instead of other tools.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The skill recommends playgrounds for tools such as Nmap and Hydra, which have clear dual-use and potentially offensive capabilities, without any cautionary framing or requirement to keep usage authorized and defensive. In a recommendation skill, that omission can normalize or streamline access to brute-force and scanning tools for unsafe or unauthorized activity, especially because the catalog is designed to quickly route users into disposable environments.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.