Security audit

Bible Research

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Jehovah's Witness Bible research skill with no code execution, persistence, credential access, or hidden installation behavior.

Install this only if you want Bible answers primarily from a Jehovah's Witness perspective. For neutral, interfaith, academic, or non-English study, explicitly ask the agent to compare viewpoints, use your preferred Bible translation, or use localized sources.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Natural-Language Policy Violations

Medium

Confidence: 91% confidence
Finding: The skill hard-codes a single denominational framework ('respond like a spiritually mature Jehovah's Witness' and use doctrinal references) without requiring an explicit user opt-in at response time. That can steer outputs toward sectarian persuasion or misrepresent neutrality, especially if the skill is triggered by broad Bible-study queries from users who did not knowingly request a Jehovah's Witness perspective.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: Line L08 states to 'Always utilize the New World Translation (NWT) as the standard reference Bible,' which imposes a specific language/translation preference as a mandatory default. The policy allows locale or language constraints only when users are given a choice or the restriction is clearly justified as region-specific compliance, which is not the case here.

Natural-Language Policy Violations

Medium

Confidence: 89% confidence
Finding: The file hard-codes English-only wol.jw.org URL patterns and search guidance, which can cause the agent to ignore a user's language or locale and return resources in the wrong language. In this skill, that creates a quality, inclusion, and consent issue rather than a direct security compromise, but it is still a real policy/control weakness because the agent is being instructed to force a specific locale without checking user preference.

Natural-Language Policy Violations

Low

Confidence: 87% confidence
Finding: The mandated terminology table enforces organization-specific language choices ('Hebrew Scriptures,' 'Christian Greek Scriptures,' 'Jehovah') rather than adapting to user preference or standard conventions. While not directly a code-execution risk, it can bias the interaction, reduce transparency, and pressure users into a particular theological framing without clear consent.

Static analysis

No suspicious patterns detected.