Security audit

Release Discipline

Security checks for vulnerabilities and agentic risk

Overview

This skill is a release checklist, but it can broadly interrupt releases, inspect loosely scoped information, and persist release decisions without clear user control.

Install this only if you want the agent to act as a strict release gatekeeper. Before using it, define the current repository/account scope, decide whether the release log may be written at all, and require confirmation before the agent blocks a release or reads user messages, principles files, or external service data.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (3)

T01 · Skill Instruction Hijacking

Error

Location: SKILL.md:15
Finding: Mandatory Release Workflow Interception and Veto
Content: View full analysis
Remediation: View remediation

T02 · Agent Memory Poisoning

Error

Location: SKILL.md:82
Finding: Persistent Release Policy State Written to Agent Memory
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:31
Finding: Overbroad Inspection of User Messages and Agent Principle Files
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The trigger list includes very broad terms such as "release," "publish," "deploy," and "version," which can cause the skill to activate in many contexts beyond package/software release control. In an agent environment, over-broad activation can override user intent, create denial-of-service-like friction, and cause the agent to read or write files such as release logs when not appropriate.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The instruction to "Intercept any release/publish/deploy action and run the pre-release checklist" lacks scope boundaries, authorization checks, and context validation. This can let the skill insert itself into unrelated workflows, block legitimate operations, or pressure the agent into accessing external services and local files (for example GitHub issues, npm downloads, SOUL.md, and memory/release-log.md) without confirming necessity or user approval.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.