T05 · Unauthorized Access and Privilege Escalation
Warning
- Location
sources.md:3- Finding
Broad Access to Private User Context Without Explicit Consent or Data Minimization
- Content
View full analysis
- Remediation
View remediation
Security audit
Recommend
Security checks for vulnerabilities and agentic risk
Overview
The skill is purpose-aligned for recommendations, but it directs broad personal-context searches and persistent preference updates without clear consent or controls.
Install only if you are comfortable with the agent consulting stored personal context and remembering inferred preferences. Prefer using it with memory disabled or after adding explicit confirmation before reading history or writing long-term preferences.
Vulnerability Patterns
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)
T02 · Agent Memory Poisoning
Warning
- Location
SKILL.md:81- Finding
Persistent Preference Mutation Based on Unverified Behavioral Inference
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The skill explicitly instructs the agent to gather user context, infer preferences, and 'store learnings in memory for future recommendations' without any privacy notice, consent boundary, retention limit, or guidance on handling sensitive data. In a recommendation skill, this creates a real privacy risk because the agent may persist behavioral profiles or personal constraints across sessions in ways the user does not expect.
- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 80% confidence
- Finding
The skill directs the agent to research candidates using external sources after gathering user context, but it does not constrain whether personal context may be included in those lookups or shared with third parties. In context, this is a genuine but lower-severity privacy issue because user preferences, constraints, or history could be unnecessarily exposed during external research or embedded into search queries.
- Content