Back to skill

Security audit

AI Paragraph Rewriter

Security checks for vulnerabilities and agentic risk

Overview

The skill does not install or run code, but it is explicitly designed to help rewrite AI text so it can bypass AI detectors.

Install only if you are comfortable with a skill whose main function is detector evasion. It should not be used to hide AI authorship, misrepresent originality, or bypass academic, workplace, or platform integrity checks.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Missing User Warnings

High
Category
Not specified by scanner
Confidence
97% confidence
Finding

The skill description openly promotes rewriting text to bypass GPTZero, Turnitin, and Originality.ai, but provides no warning, restriction, or policy boundary around that capability. This increases the likelihood of deceptive academic, compliance, or trust-and-safety misuse by normalizing evasion as the expected use case.

Content

No source excerpt is available for this finding.

Ssd 2

High
Category
Not specified by scanner
Confidence
99% confidence
Finding

The 'Bypass' mode gives concrete, stepwise tactics to rewrite AI-generated content from scratch, inject human-like imperfections, and vary rhythm specifically to pass stricter detectors. This is actionable evasion guidance that lowers the barrier to fraudulent use, including academic cheating, policy circumvention, and misrepresentation of authorship.

Content

No source excerpt is available for this finding.

Ssd 2

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

The skill is explicitly designed to help users paraphrase AI-generated text so it appears human-written and avoids detection, which is a direct facilitation of deceptive behavior. Although it uses natural-language guidance rather than code, the operational goal is still evasion of integrity controls, making the context materially dangerous.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The trigger phrases are intentionally broad and include common rewriting requests such as paraphrasing and rewording, which can cause the skill to activate outside a narrowly controlled context. In this skill, that broad routing is especially risky because the skill’s stated purpose is helping users evade AI-content detectors, so ordinary editing requests may be funneled into misuse-oriented behavior.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.