Back to skill

Security audit

Market Definition

Security checks for vulnerabilities and agentic risk

Overview

This is a simple market-analysis guidance skill with no code execution, persistence, credential use, or hidden data access.

Installers should understand that this skill may shape responses for broad market-analysis terms, but the artifact itself is low risk: it is a Markdown-only framework and does not ask for credentials, local data access, command execution, or persistent changes.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Memory Manipulation

High
Category
Memory Poisoning
Confidence
80% confidence
Finding

Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.

Content

Scanner excerpt · SKILL.md (reported line 86)May include surrounding context.

md
### Market Definition

**Scope Statement:**
"[Clear statement of what constitutes the market]"

**Includes:**
- [List of products included]

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The trigger list includes broad terms such as 'market definition,' 'market boundaries,' and 'substitution' that can match many ordinary business-analysis requests, causing the skill to activate outside a narrowly intended context. Over-broad activation can route unrelated prompts into this skill and influence outputs unexpectedly, which is a genuine security and reliability concern for agent behavior even though the content itself is non-malicious.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.