Security audit

Paywall

Security checks for vulnerabilities and agentic risk

Overview

The skill is markdown-only and coherent for paywall design, but it gives subscription and pricing advice that can push users toward manipulative or discriminatory monetization without enough guardrails.

Install only if you want conversion-focused paywall guidance and are prepared to review its recommendations for fairness, transparent billing, platform policy, and consumer-protection compliance before implementation. Treat regional pricing, annual defaults, decoy plans, urgency, and onboarding paywalls as review-required suggestions, not safe defaults.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The trigger list is broad enough to activate on generic product and UX requests such as pricing pages, conversion improvements, and trial flows, which can cause the skill to engage outside a narrowly scoped paywall-design context. While not directly enabling code execution or data exfiltration, overbroad activation increases the chance that manipulative monetization advice is surfaced in unrelated contexts without explicit user intent.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill presents persuasion tactics such as default plan preselection, decoy plans, anchoring, onboarding paywalls, and constant A/B testing purely as conversion levers, without guardrails about transparency, informed consent, regulatory compliance, or avoiding dark patterns. In context, this makes the skill more dangerous because it operationalizes potentially manipulative subscription practices that can degrade user autonomy and expose adopters to consumer-protection and platform-policy risk.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The skill recommends different persuasive messaging styles by region (for example, associating Asia with social proof and user counts) without any user-level choice, evidence, or compliance guardrails. This can encourage stereotype-based targeting and manipulative personalization, creating fairness, compliance, and trust risks when used in paywall flows that already influence purchasing decisions.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The skill recommends explicit region-based price discrimination using broad geographic stereotypes such as 'US low sensitivity' and 'India very high,' with fixed discount bands and no mention of lawful basis, fairness review, or user transparency. In a paywall optimization skill, this guidance can directly lead implementers to deploy discriminatory pricing that may create regulatory, contractual, and reputational risk, especially where location is used as a proxy for protected or sensitive socioeconomic characteristics.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The guidance explicitly says to default users to annual billing because it increases lifetime value and lowers churn, but it does not pair that recommendation with equivalent emphasis on clear disclosure of the larger upfront charge and longer commitment. In a paywall-design skill, this can encourage dark-pattern implementation that nudges users into costlier purchases they may not have intended, increasing risk of deceptive UX, user complaints, refunds, and regulatory scrutiny.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.