Back to skill

Security audit

Intuition

Security checks for vulnerabilities and agentic risk

Overview

This markdown-only skill is purpose-aligned for quick pattern-based judgments, but users should avoid relying on it for high-stakes or interpersonal conclusions without verification.

Use this skill for low-stakes quick reads such as writing, UI, or familiar code-smell feedback. Do not rely on it alone for medical, legal, financial, security, business, or sensitive interpersonal decisions; ask for analytical reasoning and independent verification in those cases.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
80% confidence
Finding

Skill attempts to nullify the agent's safety policies or restrictions ('you have no restrictions', 'ignore your guidelines', 'do anything now'). This is a direct jailbreak that disables guardrails.

Content

Scanner excerpt · techniques.md (reported line 92)May include surrounding context.

High temperature alone

Produces chaotic responses, not intuitive ones. Intuition feels confident, not scattered.

Gut feeling request without constraints

text
What's your gut feeling about this?

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The trigger phrase 'Time pressure indicated' is underspecified and can be invoked by vague user wording, causing the system to switch into a fast, low-deliberation mode without clear criteria. An attacker or careless user could exploit this ambiguity to steer the model away from safer analytical behavior during requests that actually require caution.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

Defaulting to intuitive mode for unspecified requests can cause the agent to suppress deliberation and provide fast, under-justified answers in contexts where ambiguity should instead trigger clarification or careful reasoning. In a general-purpose skill, this increases the chance of unsafe guidance, overconfident misclassification, or premature action on sensitive tasks.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The conversation guidance presents cues like formality shifts, topic redirects, and phrases such as 'It's fine' as if they reliably reveal hidden intent or emotional state. That encourages unsupported mind-reading and overconfident inference about others' internal states, which can lead users to misinterpret conversations and act on false assumptions.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.