T09 · Insecure Skill Coding Practices
Warning
- Location
setup.md:65- Finding
Plaintext Storage of Highly Sensitive User Data
- Content
View full analysis
- Remediation
View remediation
Security audit
Texas
Security checks for vulnerabilities and agentic risk
Overview
This Texas guidance skill is mostly transparent, but it needs Review because it can save very sensitive personal data in plaintext local memory despite also saying it will not.
Install only if you are comfortable with optional local memory under ~/texas/. Before enabling continuity, avoid asking it to save credentials, SSNs, payment details, account numbers, immigration-status details, or full addresses; use coarse location context like city, county, ZIP, or district when possible.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (6)
Vague Triggers
High
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The instruction to activate the skill whenever the user mentions Texas at all is an overly broad trigger that can cause the skill to engage outside the user's actual intent. This increases the chance of unnecessary context capture, irrelevant persistence decisions, and accidental handling of sensitive life, legal, or relocation topics when the mention of Texas is incidental.
- Content
Autonomous Decision Making
Medium
- Category
- Excessive Agency
- Confidence
- 75% confidence
- Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Content
md ## Common Mistakes - Comparing homes without checking the exact district and campus. - Assuming city name equals school access. - Giving family-friendly advice without childcare, commute, and summer heat logistics. - Treating every suburb in a metro as equally good for families.
Autonomous Decision Making
Medium
- Category
- Excessive Agency
- Confidence
- 75% confidence
- Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Content
md ## Common Mistakes - Comparing homes without checking the exact district and campus. - Assuming city name equals school access. - Giving family-friendly advice without childcare, commute, and summer heat logistics. - Treating every suburb in a metro as equally good for families.
Autonomous Decision Making
Medium
- Category
- Excessive Agency
- Confidence
- 75% confidence
- Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Content
md ## Common Mistakes - Comparing homes without checking the exact district and campus. - Assuming city name equals school access. - Giving family-friendly advice without childcare, commute, and summer heat logistics. - Treating every suburb in a metro as equally good for families.
Unbounded Output
Medium
- Category
- Output Handling
- Confidence
- 80% confidence
- Finding
Output size or generation rate is not bounded. Unbounded output enables denial-of-service through resource exhaustion, log flooding, or context-window stuffing.
- Content
md - Housing varies more by corridor and suburb than by city brand alone. - Insurance and weather exposure matter more than many out-of-state movers expect. - Flood logic matters in Houston and Gulf Coast, but flash flood and drainage issues show up elsewhere too. - HOA rules can materially change daily life, parking, rentals, exterior work, and short-term flexibility. ## Buying Rules
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 74% confidence
- Finding
The file defines the skill as "Setup — Texas," making it region-specific. While regional specialization can be valid, the file does not explicitly document a user opt-in or justification for this locale constraint within the skill instructions themselves.
- Content
Static analysis
No suspicious patterns detected.