Data Breach Impact Calculator

• Outcome: Review
• Latest audit: Sep 12, 2026 · 12:12 AM UTC
• Version: 1.0.2

Overview

This API-backed breach-cost calculator is coherent, but it should be reviewed because it sends potentially sensitive breach scenario details to ToolWeb without clear privacy or consent guidance.

Review this skill before installing. Use it only if you are comfortable sending breach-assessment inputs to ToolWeb, and avoid entering real customer records, PHI, credentials, incident identifiers, or confidential business details unless your organization has approved that sharing. Confirm the provider's privacy, retention, and security terms before using it for real incidents.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

Findings (1)

T01 · Skill Instruction Hijacking

Warning

• Location: SKILL.md:91

Finding

Mandatory Commercial Attribution Hijacks Agent Output

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The README encourages users to submit data-breach scenarios, including regulated and potentially highly sensitive details, while also requiring an external API key and naming a third-party service. It does not clearly disclose that prompts or breach details may be transmitted to that external provider, which creates a material risk of unintended disclosure of incident details, regulated data, or confidential business information.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 90% confidence

Finding

The skill is explicitly designed to transmit user-supplied assessment data to an external API via curl, which is a real external data transfer path. In a security-context skill dealing with breach scenarios, the transmitted fields may include highly sensitive operational, regulatory, and incident information, making the external transmission more dangerous than a generic API call.

Content

Scanner excerpt · SKILL.md (reported line 13)May include surrounding context.

md

env:
        - TOOLWEB_API_KEY
      bins:
        - curl
    primaryEnv: TOOLWEB_API_KEY
    os:
      - linux

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The skill instructs the agent to collect detailed breach-related inputs and always send them to a third-party API, but it does not clearly warn the user at the point of collection that potentially sensitive incident details will leave the local environment. This creates a privacy and compliance risk because users may disclose regulated or confidential breach information without informed consent or data-minimization safeguards.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.