Back to skill

Security audit

Community Intel

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed community-monitoring workflow that searches public sources, keeps a project intel log, and can optionally send reports to user-configured channels.

Install this for public community monitoring when you are comfortable with recurring searches, a persistent project intel log, and optional delivery to configured Discord or email destinations. Keep search terms and destinations explicit, and do not use it for sensitive internal research unless you intentionally want those findings retained and shared through the configured channels.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The skill description is broad enough to be triggered by many generic research or monitoring requests, which can cause the agent to invoke this skill in situations the user did not explicitly intend. Because the skill performs web searches and may compile and distribute reports, over-broad routing increases the chance of unnecessary external access and unintended data handling.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The skill instructs the agent to read and append to a persistent intel file and optionally post results to Discord or email, but it does not surface these persistence and outbound-sharing behaviors to the user at execution time. This can lead to silent retention of gathered content and transmission of summaries to external destinations, which is risky if prompts, findings, or linked material contain sensitive, proprietary, or regulated information.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.