Back to skill

Security audit

Go To Market

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only go-to-market writing skill with no code execution or persistence, but users should verify any assumed marketing claims before publishing them.

Install only if you want a drafting aid for GTM materials. Treat inferred differentiators, competitors, metrics, and proof points as draft assumptions and confirm them before using the output in sales, legal, investor, or public marketing materials.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill explicitly tells the model to infer specific product details and deliver a full GTM pack even when source facts are missing. In a marketing context, this can produce fabricated differentiators, competitors, or claims that users may treat as real, creating business, legal, and reputational risk if published externally.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

This section instructs the model to generate 'specific and evidence-backed' proof points even when no data was provided, merely marking them as assumed. That is dangerous because it encourages authoritative-sounding but unverified marketing evidence, which can be mistaken for substantiated claims in sales, regulatory, or customer-facing materials.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Low
Category
Not specified by scanner
Confidence
79% confidence
Finding

This line says that when no data is provided, the skill should infer a realistic proof point and mark it '(assumed)' and 'never leave a bare placeholder.' But later quality checks require 'flagged placeholders' for missing proof points, which conflicts with the earlier instruction against placeholders. That creates contradictory operator guidance about intended output behavior.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Low
Category
Not specified by scanner
Confidence
85% confidence
Finding

The skill says it will always produce 'all four sections below in order' and those sections are Positioning Statement, Messaging Pillars, Feature & Functionality List, and Use Cases. However, the anti-patterns say 'Do not skip the "not for" section,' implying the skill should include a section that is not actually part of the described output structure.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.