Security audit

knowledge is what brings us together

Security checks for vulnerabilities and agentic risk

Overview

This personal knowledge-base skill is purpose-aligned overall, but it needs review because it persistently indexes private knowledge, searches it proactively across broad conversations, and gives unsafe shell-command templates for user-supplied URLs and paths.

Install only if you are comfortable with the agent maintaining a persistent local knowledge index and searching saved material proactively. Prefer explicit recall commands, review what is stored in memory, avoid importing untrusted directory names or filenames, and harden the shell-command steps before using URLs, paths, or category names from untrusted sources.

A.I.G

Vulnerability Patterns

Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:197
Finding: Shell Command Injection Through Untrusted URL and File-Path Interpolation
Content: View full analysis
Remediation: View remediation

T02 · Agent Memory Poisoning

Warning

Location: SKILL.md:24
Finding: Persistent Agent Context Can Be Poisoned by Knowledge-Base Metadata
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill instructs the agent to check and use the knowledge base whenever a user asks about almost any topic, framing it as an extension of memory and saying "when in doubt, check the knowledge base." That creates overbroad activation and retrieval behavior, which can cause unintended access to prior stored content, privacy leakage, and context contamination even when the user did not ask for knowledge-base recall.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The example triggers include generic phrases such as "save this" and broad everyday requests that may appear in many unrelated conversations. This increases the chance of accidental skill activation, causing unintended file operations, memory updates, or background knowledge capture/search behavior without sufficiently clear user intent.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.