Back to skill

Security audit

Agent Cognitive Os

Security checks for vulnerabilities and agentic risk

Overview

This is a broad agent-planning guidance skill, but its behavior is disclosed, non-executable, and includes verification and safety guardrails.

Install this only if you want a broad Indonesian-language agent-control and planning style to influence top-level tasks. Review its activation wording if you prefer narrower skill use, but no executable code, hidden persistence, credential handling, or destructive automation was found.

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The phrase 'Use when the conditions in the description are met' does not define concrete activation triggers or boundaries. Combined with the broad description of 'top-level agent control,' this leaves unclear when the skill should or should not be invoked, increasing the risk of unintended activation.

Vague Triggers

High
Confidence
96% confidence
Finding
The description says to use the skill when 'activating top-level agent control' and lists very broad capabilities like goal understanding, planning, and orchestration. Those concepts overlap with many ordinary agent tasks and do not clearly constrain when the skill should or should not activate beyond a high-level label, increasing the chance of accidental or overly frequent invocation.

Vague Triggers

High
Confidence
98% confidence
Finding
The phrase 'Invoke this skill for any top-level agent task' is an extremely expansive trigger that could match a large share of normal user requests. It lacks concrete scope constraints or exclusion criteria, making unintended activation likely.

Natural-Language Policy Violations

Medium
Confidence
95% confidence
Finding
Most of the operational instructions are written in Indonesian, while surrounding metadata and some headings are in English, and the file does not state that the skill is intentionally region-specific or require user opt-in to that language. This creates a natural-language policy issue because it implicitly imposes a language choice on users without documenting or offering alternatives.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
| Acting without a plan | Hierarchical planning first |
| Losing state between steps | Track state explicitly |
| Ignoring plugin orchestration | Coordinate multi-plugin flows |
| No verification gate | Verify each milestone |

## Red Flags
Confidence
75% confidence
Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Unbounded Resource Access

Medium
Category
Excessive Agency
Content
NEVER FABRICATE
NEVER CLAIM UNVERIFIED SUCCESS
NEVER RETRY FOREVER
NEVER IGNORE CURRENT STATE
NEVER CONFUSE ASSUMPTION WITH FACT
NEVER USE EXCESSIVE PRIVILEGE
Confidence
75% confidence
Finding
Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.

Static analysis

No suspicious patterns detected.