Security audit

Senior Dev

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent development workflow, but it can automatically stage broad repository changes and publish PRs, issues, and deployment logs without enough scoping or user confirmation.

Install only if you want an opinionated workflow that may create commits, PRs, GitHub issues, and deployment checks. Before using it, narrow when it activates, require confirmation before git/Graphite/GitHub actions, stage only task-specific files, and redact logs before putting them in issues.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:35
Finding: Unrestricted Repository Staging May Expose Sensitive Files
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:72
Finding: Deployment Logs May Be Published Without Sensitive-Data Redaction
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill description is triggered by very broad phrases like 'starting a new task' or 'any development work,' which can cause the agent to invoke this workflow in many unrelated contexts. Because the workflow includes state-changing operations such as git add -A, branch creation, PR submission, issue creation, and deployment checks, over-broad activation increases the chance of unnecessary or unsafe repository and external-service actions.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.