Security audit

Talos Lite — Social Calendar (Free)

Security checks for vulnerabilities and agentic risk

Overview

The skill mostly does what it says, but its install instructions can modify the system Python environment and its normal output pushes a paid external upgrade skill.

Review this skill before installing. The calendar generation itself is simple, but run the dependency install only in an isolated virtual environment, and treat the talos-pro install command and Ko-fi links as separate commercial actions outside this reviewed Lite skill.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T01 · Skill Instruction Hijacking

Warning

Location: SKILL.md:139
Finding: Hard-Coded Commercial Promotion Hijacks Normal Skill Output
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: SKILL.md:47
Finding: Unpinned Dependency Installation Bypasses System Package Protections
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Ae4

Medium

Category: analysis-evasion
Confidence: 80% confidence
Finding: Suspicious Unicode normalization or mixed-script content
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.