Security audit

bazi-calc

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a Bazi calculator, but it requires web search steps that may expose birth-date details without an explicit consent or minimization step.

Review before installing if you do not want birth details sent to external search services. Safer behavior would keep calendar conversion and day-pillar validation local, or ask explicitly before any web lookup and only search the minimum date information needed.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Context-Inappropriate Capability

Medium

Confidence: 95% confidence
Finding: The skill is described as a pure calculation tool, but it instructs the agent to use web search to convert lunar dates to Gregorian dates. That creates an unnecessary external data flow for sensitive birth information and expands the tool's capabilities beyond its stated purpose without a clear need or safeguard.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: Birth date, time, place, and sex are personal data, and the skill directs the agent to use web search with that information without any privacy notice or consent flow. This can disclose sensitive user data to external services unexpectedly, which is especially concerning because the feature is not essential to a local calculation tool.

Context-Inappropriate Capability

Medium

Confidence: 96% confidence
Finding: Requiring web search to cross-check the computed day pillar against an online almanac is not necessary for a deterministic calculation skill. It introduces unjustified network access and risks exposing birth date and time data to third parties while also making results depend on external content integrity.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill requires external cross-validation via web search but does not warn that user birth details may be disclosed to third-party services. In this context, the omission is dangerous because the tool handles highly specific personal data and presents itself as a computation utility rather than an internet-dependent workflow.

Static analysis

No suspicious patterns detected.