Back to skill

Security audit

Mystilink Router

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple router that helps choose one Mystilink metaphysics skill and does not include executable code, credential access, persistence, or hidden behavior.

This package appears safe as a routing aid. Before installing, make sure you also trust any Mystilink target skills it may hand off to, since those separate skills will control the actual calculation or reading behavior.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (8)

Credential Access

High
Category
Privilege Escalation
Confidence
60% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · .gitignore (reported line 18)May include surrounding context.

text
.idea/
.vscode/
*.log
.env
.env.*
!*.env.example

Ae1

High
Category
analysis-evasion
Confidence
100% confidence
Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 48)May include surrounding context.

md
Load the chosen skill’s `SKILL.md` and follow it. Mention briefly why that system fits.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file includes a locale behavior that forces a specific language fallback when the user does not choose one. The policy for natural-language handling requires user choice or a clearly justified locale constraint; defaulting to English and possibly zh-Hans in a Traditional Chinese README is a language-policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
81% confidence
Finding

The manifest sets default_locale: en, and later instructions direct fallback to zh-Hans if the requested locale is missing. This imposes language behavior in natural-language-facing routing without indicating user choice or opt-in, which can violate locale policy expectations.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

Line L59 states that omitting locale/lang defaults requests to en, which imposes a language choice rather than presenting language selection as user-driven. This is a natural-language locale policy concern because the documented behavior favors a specific language without explicit opt-in in the described usage.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

This markdown file is a Japanese-only localized skill description, and the content does not state that the skill should respect or ask for the user's preferred language during operation. Under the policy rule, forcing or assuming a specific language without opt-in can be a natural-language locale violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
83% confidence
Finding

The text states that omitting locale/lang causes the system to default to en, which is a language/locale behavior encoded in natural language. Under the policy, forcing a specific language without user opt-in can be a locale policy violation, and this line does not present the default as user-selectable.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

Line L19 states that locale omission defaults to en and missing translations may fall back to zh-Hans. This imposes language behavior on the user without mentioning any opt-in or choice, which can conflict with language/locale policy requirements.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.