Security audit

Unit Test Coverage Helper

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only unit-test helper whose main issue is overly broad auto-activation language, not hidden or harmful behavior.

Before installing, consider narrowing activation phrases or disabling implicit invocation so it only runs for explicit unit-test or coverage requests. The skill itself does not ship executable code or request sensitive access.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger phrases are very broad and match ordinary help-seeking language such as 'Help me' and 'I need a practical workflow,' which can cause this skill to activate in many unrelated conversations. In an agent ecosystem, overbroad activation can misroute user requests, override more appropriate skills, and expand the attack surface for instruction collisions or prompt injection via unnecessary skill invocation.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The listed trigger phrases are broad and template-like, causing the skill to activate on generic requests about testing or practical workflows rather than on a narrowly scoped intent. In an agent environment, this can lead to incorrect skill routing, unexpected invocation, and increased exposure to any unsafe behavior contained in the skill or its downstream instructions.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill advertises broad trigger keywords like 'software-and-data', 'testing', and 'quality' plus generic invocation phrasing, which can cause the skill to activate outside its intended unit-test coverage scope. Unintended activation can route unrelated user requests into this skill, producing misleading guidance, interfering with skill selection, or crowding out more appropriate skills.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger list includes very broad generic terms such as 'testing' and 'quality', which commonly appear in unrelated conversations. This can cause the skill to activate outside its intended scope, leading to irrelevant guidance, user confusion, or unintended interception of requests better handled by another skill.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill is configured with broad activation language and allow_implicit_invocation=true, which can cause the agent to invoke it for loosely related requests such as general software, testing, regression, or analysis tasks. This increases the chance of unintended routing, exposing repository context or causing the skill to act when the user did not explicitly request it, though the security impact is limited because the skill purpose is not inherently high risk.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The trigger sentence is so generic that it can match ordinary user requests unrelated to this specific skill, causing the agent to invoke the skill in unintended contexts. Over-broad activation increases the chance of prompt-routing errors, irrelevant instructions being injected into unrelated tasks, and reduced operator control over which capabilities run.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.