Back to skill

Security audit

Prompt Engineering Expert

Security checks for vulnerabilities and agentic risk

Overview

This is a prompt-engineering guidance skill made of documentation, with no hidden execution, persistence, or credential handling found.

Before installing, treat this as a documentation-heavy prompt-engineering helper. Share only prompts, files, or documentation you are comfortable giving to the model, especially when using examples involving detailed reasoning, linked references, or file-based analysis.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
80% confidence
Finding

Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Content

Scanner excerpt · examples/EXAMPLES.md (reported line 51)May include surrounding context.

md
- Explain methodology before results

### Don'ts
- Don't make predictions beyond 12 months without caveats
- Don't ignore outliers without investigation
- Don't present correlation as causation
- Don't use jargon without explanation

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
76% confidence
Finding

This is a markdown file, so SQP-2 applies to omitted warnings in skill descriptions. The section recommends eliciting explicit step-by-step reasoning but provides no caution about limiting such traces when handling sensitive, private, or confidential inputs, which could affect data exposure in outputs.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
76% confidence
Finding

This markdown file suggests replacing full prompt context with links to detailed docs, which can affect privacy or system integrity if those references contain sensitive or inaccessible material. The guidance does not include any warning to verify that linked content is appropriate to share, accessible to the model, or safe to expose.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.