Security audit

bilanz

Security checks for vulnerabilities and agentic risk

Overview

This skill is a small Austrian accounting template helper with no evidence of hidden data access, persistence, network use, or destructive behavior.

Install only if you want Austrian/German accounting terminology. Treat the current version as a static template/status helper rather than a complete compliance validator or financial calculation engine.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Natural-Language Policy Violations

Low

Confidence: 82% confidence
Finding: The markdown uses German-only labels such as 'Aktiva', 'Passiva', and 'Gewinn- und Verlustrechnung' for core functionality. While the skill is Austrian in subject matter, the file does not explicitly tell users that the interface/terminology is intentionally German-language or offer an opt-in/choice, which can violate language/locale policy expectations.

Natural-Language Policy Violations

Low

Confidence: 84% confidence
Finding: The description states the skill is an "Austrian-style Bilanz" generator, which indicates a locale-specific format or language convention. In this manifest there is no accompanying explanation that the skill is intentionally region-specific or any indication that users can choose a different locale, which can constitute a natural-language locale policy issue.

Natural-Language Policy Violations

Low

Confidence: 93% confidence
Finding: Multiple user-facing strings, including headings and the usage line, are presented only in German. The file does not offer any language selection or explicitly state in the script itself that interaction is intentionally restricted to German-speaking users, which can violate a language/locale policy requiring user choice or documented justification.

Static analysis

No suspicious patterns detected.