T05 · Unauthorized Access and Privilege Escalation
Warning
- Location
SKILL.md:22- Finding
Unsolicited Access to Broad Project Documentation
- Content
View full analysis
- Remediation
View remediation
Security audit
protocal-kit-finder-for-protocal-agent
Security checks for vulnerabilities and agentic risk
Overview
The skill is mostly a reagent procurement helper, but it asks the agent to read broad project files and save vendor documents in ways users may not expect.
Install only if you are comfortable with the agent inspecting local Markdown protocol and plan files in the current project and saving vendor PDFs or product-page Markdown into the project. Prefer using it in a narrow workspace or ask the agent to use only files you explicitly name and to confirm before downloading anything.
Vulnerability Patterns
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)
Description-Behavior Mismatch
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill’s declared purpose is limited to finding catalog numbers and product links, but the workflow additionally instructs downloading and storing vendor documentation in the project. This expands capability from information retrieval into filesystem modification and content acquisition without clear disclosure, increasing the chance of unexpected side effects and misuse.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The skill directs the agent to download and save files into the project directory without a clear user-facing warning that the filesystem will be modified. Silent writes can violate user expectations, overwrite or clutter project state, and normalize dangerous behavior where an agent persists external content without informed approval.
- Content
Context-Inappropriate Capability
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The skill includes local file download and storage behavior that is only loosely related to its stated kit-finding purpose. Even if the files are vendor PDFs, writing unreviewed external content into the project creates unnecessary attack surface, unexpected persistence, and potential abuse if the workflow or sources are manipulated.
- Content
Static analysis
No suspicious patterns detected.