Security audit

Competitor Teardown

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed competitor-research workflow that uses web fetching and search for its stated purpose, with no bundled code, persistence, or hidden privilege behavior.

Install this if you want an agent to perform web-based competitor research. Use it with public competitor URLs only, review the sources it cites, and be aware that web pages and reviews may contain biased or manipulative content unless the agent treats them strictly as evidence.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:15
Finding: Unrestricted User-Controlled URL Fetching
Content: View full analysis
Remediation: View remediation

T01 · Skill Instruction Hijacking

Warning

Location: SKILL.md:20
Finding: Indirect Prompt Injection Through Untrusted Web Content
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The trigger phrases are broad enough to match common business-strategy conversations such as 'competitor analysis' or 'why is competitor winning,' which can cause the skill to activate when the user did not explicitly request this workflow. Unintended invocation can steer the agent into unnecessary web fetching and structured competitor profiling, increasing the chance of irrelevant data access, surprise tool use, or workflow hijacking away from the user's actual intent.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.