Security audit

Barcelona

Security checks for vulnerabilities and agentic risk

Overview

This is a static Barcelona guide with no executable or persistent behavior; the main caution is ordinary content quality, especially student drinking tips without legal or safety context.

Before relying on this skill, verify time-sensitive prices, laws, and transport details independently. Be especially cautious with the student nightlife advice, since public drinking may carry legal or safety risks. No evidence was found of code execution, credential access, persistence, or data exfiltration.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The activation condition is very broad: 'User asks about Barcelona for any purpose' can match many generic travel, news, history, sports, or unrelated city-reference queries and cause unintended invocation. This can lead to inappropriate routing, unnecessary context loading, and increased chance of the skill influencing responses outside its intended scope, though it does not by itself create direct code execution or data exfiltration risk.

Natural-Language Policy Violations

Low

Confidence: 82% confidence
Finding: This markdown file contains natural-language guidance framed around a specific locale and language context, such as 'traditional Spanish hours' and phrase recommendations in Catalan/Spanish. Because the content does not force the user to respond in a specific language or require a locale-restricted interaction, this is a minor policy concern rather than a strong violation.

Natural-Language Policy Violations

Low

Confidence: 76% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations in natural language. The wording emphasizes Catalan as the default and recommends private/international options for Spanish-only education, which could be read as prescribing a language path without user opt-in or neutral framing.

Natural-Language Policy Violations

Low

Confidence: 84% confidence
Finding: This markdown file presents all neighborhood guidance exclusively in English and does not indicate any option for the user to choose another language or locale. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the constraint is documented and justified.

Missing User Warnings

Low

Confidence: 94% confidence
Finding: The guide explicitly recommends botellón as a money-saving tip without noting that public drinking may be illegal, fined, or unsafe. In a student-oriented travel/lifestyle skill, this can normalize unlawful or risky behavior for inexperienced users who may rely on the advice as practical guidance.

Missing User Warnings

Low

Confidence: 91% confidence
Finding: Listing botellón in the social scene without caution presents public drinking as a normal student activity while omitting legal and personal safety considerations. Because the skill targets students and visitors, the omission is more dangerous: users may not know local laws, enforcement practices, or associated risks around intoxication and public spaces.