Back to skill

Security audit

Father.skill

Security checks for vulnerabilities and agentic risk

Overview

This is a local, text-only memory-preservation skill with disclosed private storage and no evidence of hidden instructions, code execution, network transfer, or credential use.

Install only if you are comfortable storing personal memories locally under ~/.father-skill/. Keep that folder private, delete it when no longer needed, and treat any generated 'what would dad say?' response as a reflective aid based on your notes rather than literal truth or professional advice.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Hidden Instructions

High
Category
Prompt Injection
Content
Parenting tier (different purpose):
- 👨 [dad.skill](https://clawhub.ai/realteamprinz/dad) — Daily parenting tool (NOT the same as father.skill)
- 👩 [mom.skill](https://clawhub.ai/realteamprinz/mom) — For mothers
- 👨‍👩‍👧 [parent.skill](https://clawhub.ai/realteamprinz/parent) — Unified co-pilot

Peer tier:
- 🤜 [brother.skill](https://clawhub.ai/realteamprinz/brother) — Distill your bros
Confidence
60% confidence
Finding
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Hidden Instructions

High
Category
Prompt Injection
Content
Parenting tier (different purpose):
- 👨 [dad.skill](https://clawhub.ai/realteamprinz/dad) — Daily parenting tool (NOT the same as father.skill)
- 👩 [mom.skill](https://clawhub.ai/realteamprinz/mom) — For mothers
- 👨‍👩‍👧 [parent.skill](https://clawhub.ai/realteamprinz/parent) — Unified co-pilot

Peer tier:
- 🤜 [brother.skill](https://clawhub.ai/realteamprinz/brother) — Distill your bros
Confidence
60% confidence
Finding
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Static analysis

No suspicious patterns detected.