Back to skill

Security audit

Naming

Security checks for vulnerabilities and agentic risk

Overview

This is a naming-assistant skill that keeps optional local naming notes and does not show hidden network, code execution, or production mutation behavior.

Before installing, decide whether you want the skill to keep local naming memory in ~/naming/ and whether you want proactive naming suggestions. It is reasonable for this purpose, but users handling confidential brand, product, or legal naming work should be deliberate about what they save locally and should still perform live trademark, domain, registry, or legal checks separately.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
85% confidence
Finding

Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Content

Scanner excerpt · SKILL.md (reported line 79)May include surrounding context.

md
- Never judge a feature name with the same rubric used for a company name. The lane defines the winning tradeoff.

Memory Manipulation

High
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.

Content

Scanner excerpt · rename-playbook.md (reported line 32)May include surrounding context.

md
3. Decide whether aliases are temporary, permanent, or impossible
4. Update the highest-confusion surfaces first
5. Communicate the change where users will trip over it
6. Track whether the new name is actually being adopted

## Alias Rules

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The setup instructs the skill to establish broad activation behavior such as jumping in whenever the user asks for names, renames, labels, taxonomy cleanup, or naming consistency. This can cause the skill to activate on common conversational patterns without a narrowly scoped trigger, increasing the chance of unwanted intervention, prompt hijacking of unrelated workflows, or over-collection of user preferences and context.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.