Back to skill

Security audit

Berlin

Security checks for vulnerabilities and agentic risk

Overview

This is a static Berlin guide with no executable behavior, but users should verify current legal, tax, visa, housing, and local-rule advice before relying on it.

Installers should understand this as a Berlin reference pack, not an authoritative legal, tax, immigration, medical, or housing adviser. Verify current requirements, prices, and local rules before acting, especially for business setup, visas, healthcare, rental decisions, and waste disposal.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (14)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The activation condition is extremely broad: any user asking about Berlin 'for any purpose' can trigger the skill. Overly broad routing can cause the agent to invoke this skill outside its intended scope, increasing the chance of irrelevant or unsafe guidance being presented as authoritative city-specific advice.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The file provides specific legal, tax, registration, and compliance guidance, including rates, thresholds, and procedural steps, without warning that requirements can change or vary by individual circumstances. Users may rely on outdated or oversimplified information when forming a business, handling VAT, or hiring, which can lead to noncompliance, fines, or costly setup mistakes.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The statement 'Or: Leave on street (Berliners take what they want)' encourages improper disposal of bulky waste and may lead users to violate local sanitation or dumping rules. In a city-services guidance skill, users are likely to treat this as practical advice, which increases the chance of non-compliant real-world behavior even if the intent was to describe an informal local custom.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The line recommending users avoid certain neighborhoods if they need 'English spoken' makes a language-based recommendation without user opt-in and uses broad demographic generalizations about local residents. This can steer users away from areas based on perceived linguistic or cultural fit, reinforcing bias and potentially resulting in discriminatory housing guidance in a high-stakes context.

Content

No source excerpt is available for this finding.

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 160)May include surrounding context.

md
- **E-scooters**: Same rules as bikes, illegal on sidewalks

### Photography
- **GDPR applies**: Can't photograph people without consent
- **Street photography**: Gray area, be respectful
- **Children**: Never photograph other people's children
- **Private property**: Ask permission

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · berlin-review.html (reported line 189)May include surrounding context.

html
- **E-scooters**: Same rules as bikes, illegal on sidewalks

### Photography
- **GDPR applies**: Can't photograph people without consent
- **Street photography**: Gray area, be respectful
- **Children**: Never photograph other people's children
- **Private property**: Ask permission

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · berlin-review.html (reported line 2788)May include surrounding context.

html
- **E-scooters**: Same rules as bikes, illegal on sidewalks

### Photography
- **GDPR applies**: Can't photograph people without consent
- **Street photography**: Gray area, be respectful
- **Children**: Never photograph other people's children
- **Private property**: Ask permission

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · safety.md (reported line 68)May include surrounding context.

md
- **E-scooters**: Same rules as bikes, illegal on sidewalks

### Photography
- **GDPR applies**: Can't photograph people without consent
- **Street photography**: Gray area, be respectful
- **Children**: Never photograph other people's children
- **Private property**: Ask permission

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
71% confidence
Finding

The content assumes a Berlin/Germany context and mixes German administrative terms with English explanations, but it does not explicitly state at the outset that the guidance is region-specific or offer alternatives for users in other locales. This can be a natural-language locale-policy issue when a skill implicitly forces a specific jurisdictional context without clear opt-in or justification.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
78% confidence
Finding

This markdown file recommends specific businesses and includes subjective claims such as 'Best falafel' and 'Best Italian in Berlin' without any disclaimer that information may change or should be verified. For a user-facing guide that could influence real-world decisions, a brief warning about hours, ownership, or quality changing would improve safety and reliability.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
76% confidence
Finding

Lines L013-L017 instruct the user with German-only ordering phrases such as "Ein Döner bitte" and "Mit alles." Under the policy, forcing a specific language without user opt-in can be a natural-language policy issue, and the file does not explicitly offer alternatives or note that the language usage is optional.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
79% confidence
Finding

Line L031 refers to staying in an 'English bubble,' and the document repeatedly frames English availability as a default benefit for users. Because the skill is a general lifestyle guide rather than an explicitly English-only or region-specific language tool, this can be read as embedding a language assumption without opt-in or alternative language framing.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
83% confidence
Finding

The guide repeatedly presents German language attainment as a required integration and long-term residency path, including explicit B1 expectations, without stating that the skill is specifically for Germany-focused immigration guidance or offering any language/locale alternative. Under the policy rule, this can be read as a locale-specific language requirement embedded in the skill's natural-language guidance.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
79% confidence
Finding

This markdown file is entirely written in English and does not indicate that users may request another language or locale. Under the policy rule for natural-language violations, forcing a specific language without opt-in can be a policy issue when no choice is offered.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.