Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward local FAQ knowledge-base tool, with expected local storage and file operations but no evidence of hidden execution, exfiltration, or unsafe persistence.
Install only if you want a local FAQ database stored on disk. Be aware that imported FAQ content is saved under ~/.faq-bot unless FAQ_BOT_DIR is set, remove deletes entries immediately, and export may overwrite the chosen output file.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
# Create knowledge base
python scripts/faqbot.py init
# Import from markdown
The skill advertises executable workflows that read and write local files and may rely on environment/context, but it does not declare any explicit tool scope or permissions boundaries. In an agent system, that ambiguity can cause the skill to be invoked with broader capabilities than intended, increasing the risk of unintended file access or modification when handling user-supplied paths and content.
The description contains broad activation phrases like 'build a knowledge base,' 'search FAQs,' and 'answer common questions,' which can match many ordinary user requests outside a narrow WhatsApp FAQ-bot setup. Over-broad routing can cause the agent to invoke this skill in unrelated contexts, leading to unnecessary file operations, inappropriate automation, or leakage/modification of local knowledge-base content.
The remove command permanently deletes an FAQ entry from the local knowledge base and immediately writes the modified data back to disk. Although it prints a message after deletion, there is no confirmation prompt or advance warning before this destructive operation occurs.
This markdown file documents that data is stored in ~/.faq-bot/ by default, which affects user data persistence on disk. While the location is stated, there is no warning or caution about storing potentially sensitive FAQ/business content locally or how to manage/delete it.
The manifest and module docstring position the skill as a WhatsApp FAQ bot, but the code only provides local commands to initialize, import, search, list, remove, export, and inspect a JSON-backed FAQ database. There is no WhatsApp API integration, message handling, webhook logic, or bot behavior in the implementation.
The export command writes knowledge base contents to a user-specified output path using write_text, which can overwrite existing files. The code only reports the write after it happens and does not include a prior warning, overwrite confirmation, or explicit disclosure comment for this file write behavior.
No suspicious patterns detected.