Security audit

Painpoint Discovery Expert

Security checks for vulnerabilities and agentic risk

Overview

This skill performs disclosed web research to find startup painpoints and does not show hidden code execution, credential access, exfiltration, or destructive behavior.

Install this if you want an agent to research public web sources for startup painpoints. Before running it, be aware that your domain keywords may be sent to search engines and public sites, and deep-research mode may take up to about 30 minutes and create local Markdown report files.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The README presents a very broad natural-language trigger example for automatically invoking the skill, which can cause the agent platform to activate this skill on loosely matching user requests. That creates a control-flow risk: users may unintentionally trigger web research or domain analysis behavior when they did not explicitly request this specific capability, leading to unnecessary external actions, confusion, or policy bypass through misrouting.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The deep-research subagent mode describes spawning an independent subagent for 10+ searches and extended execution time, but it does not define clear trigger constraints, confirmation requirements, or execution boundaries. In an agent ecosystem, ambiguous delegation into a longer-running subagent increases the risk of unintended resource consumption, unexpected autonomous behavior, and accidental escalation from a simple query into broad external research activity.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger phrase "startup research" is broad and generic, so the skill may activate for user requests that are not actually about painpoint discovery. This can cause unintended routing, unnecessary browsing-based research, and confusing or inappropriate responses, though it does not directly create code execution or data exfiltration risk.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill explicitly instructs scraping Reddit, Quora, and forums and then writing report files, but it provides no user-facing notice, consent check, or guardrails around data collection and filesystem side effects. That creates a real transparency and privacy problem: a user may trigger network collection and persistent local outputs without understanding that external sites will be queried and artifacts will be stored.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill directs the agent to browse Google, Bing, Reddit, Quora, and forums and scrape third-party pages, but it never instructs the agent to warn the user that external requests will be made. This creates a privacy and transparency issue because user-supplied domains or context may be exposed to external services, and the agent may collect third-party content without explicit informed consent.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The activation phrase "Find painpoints in X domain" is broad enough that the skill may trigger on loosely related user requests and initiate web research without clear user intent boundaries. In a browsing-enabled agent, this can cause unexpected external navigation and data handling, especially when a user intended only a conceptual discussion rather than live scraping.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: This markdown file presents all user-facing content in English and does not indicate that the language is optional or user-selectable. Under the policy rule for language or locale, forcing a single language without opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.