Security audit

Telecom Agent Skill

Security checks for vulnerabilities and agentic risk

Overview

This telecom skill is purpose-aligned but needs review because it can trigger bulk calling, recording, transcript access, and Twilio onboarding without enough scoping or privacy detail.

Review this carefully before installing. Use only a pinned and reviewed version, limit Twilio credentials, set spending and destination controls, require explicit human approval for campaigns and calls, and confirm recording consent, transcript retention, and access-control policies before using it with real callers or customer data.

A.I.G

Vulnerability Patterns

Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

Findings (1)

T03 · Remote Payload Retrieval and Execution

Error

Location: SKILL.md:37
Finding: Installation of a Mutable Remote Skill Without Integrity Verification
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Missing User Warnings

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill states that it "Records audio automatically for quality assurance" but does not present any user-facing warning, consent requirement, or jurisdictional compliance notice. In a telecom/public telephone network context, undisclosed recording can create serious privacy, legal, and regulatory exposure, especially across regions with two-party consent laws.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The ChatOps example uses a very broad natural-language trigger ("Bot, create a campaign...") without any stated activation boundary, authorization check, or confirmation requirement. In a telecom skill that can initiate bulk calling, ambiguous trigger phrases raise the risk of accidental or prompt-injected campaign creation, making the context more dangerous than a generic automation skill.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill advertises access to full call transcripts and persistent storage of logs in an operator console, but it does not include a privacy warning, retention policy, access control expectations, or handling guidance for sensitive data. Because transcripts and telecom logs can contain personal, financial, or regulated information, silent persistence and retrieval materially increase privacy and insider-abuse risk.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.