Error Message Improver

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 10:32 AM UTC
• Version: 0.20260729.110214

Overview

This markdown-only skill is purpose-aligned for improving error messages, though its broad trigger wording may make it activate for general debugging or support requests.

Install only if you want a broadly available helper for improving error messages and troubleshooting copy. Be aware it may activate on general debugging or support wording; prefer explicit invocation when you want this skill and revise triggers if you need tighter routing.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (10)

Vague Triggers

High

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The skill description is written with very broad applicability terms such as 'work-productivity,' 'debugging,' 'support,' and 'implementation support,' which can cause the skill to be invoked for many unrelated requests. Over-broad routing increases the chance that this skill intercepts prompts outside its intended scope, leading to prompt shadowing, incorrect delegation, or suppression of more appropriate specialized skills.

Content

No source excerpt is available for this finding.

Vague Triggers

High

• Category: Not specified by scanner
• Confidence: 98% confidence

Finding

The trigger keywords and example phrases are highly generic and lack boundaries, making accidental or overly aggressive activation likely. In a skill-routing environment, this can be exploited indirectly by causing the skill to activate on common support or debugging language, potentially hijacking user intent and degrading system reliability or safety review coverage.

Content

No source excerpt is available for this finding.

Vague Triggers

High

• Category: Not specified by scanner
• Confidence: 98% confidence

Finding

The trigger sentence is so broad and awkwardly templated that it can match ordinary user language rather than a narrowly scoped skill invocation. That increases the chance of accidental activation or routing of unrelated requests into this skill, which can cause prompt hijacking opportunities, incorrect task handling, or leakage of irrelevant internal workflow behavior.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The trigger sentence is phrased as a broad natural-language request and closely resembles ordinary user intent, which can cause the skill to activate when a user is merely asking for general help. In an agent environment, unintended invocation can route prompts through the wrong skill, leading to confusing behavior, mis-scoped assistance, or accidental exposure of context to a skill the user did not intend to use.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 89% confidence

Finding

This trigger uses a generic request pattern ('I need a practical workflow for...') without meaningful boundaries, so many unrelated productivity or support requests could match it. That increases the chance of over-triggering, which can hijack normal routing, reduce reliability, and cause the skill to process conversations outside its intended domain.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The trigger phrases are broad enough to match routine requests about productivity, debugging, support, and user feedback, which can cause the skill to activate in contexts the user did not intend. In an agent system, overbroad activation expands the skill's influence surface and can route unrelated prompts through this workflow, creating opportunities for prompt hijacking, incorrect tool selection, or unintended handling of sensitive troubleshooting content.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The skill description says to use the skill whenever a user asks about several very broad categories, making invocation ambiguous and overly permissive. In an agentic system, this can route many ordinary support or productivity requests into this skill, exposing users to irrelevant instructions and increasing the attack surface for unintended tool behavior.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The trigger keywords are broad and generic (for example, work-productivity, debugging, support, troubleshooting), which can cause the skill to activate for many unrelated requests. Over-broad activation increases the chance of prompt/skill hijacking, unnecessary context injection, or the wrong workflow being applied to user tasks outside the intended error-message-improvement scope.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The skill enables implicit invocation while exposing a very broad description and default prompt covering general productivity, debugging, support, workflows, and implementation help. This creates an overbroad trigger surface where the agent may invoke the skill in contexts the user did not explicitly request, potentially causing unintended routing, prompt-scope expansion, or interference with safer/more appropriate skills.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

This file is labeled as a Chinese README, but key descriptive and trigger content is presented in English, which implicitly forces part of the user interaction into a specific language. There is no statement that the user may choose language or that English is required for a justified regional or product reason.

Content

No source excerpt is available for this finding.