T05 · Unauthorized Access and Privilege Escalation
Warning
- Location
agents/herbert/AGENTS.md:5- Finding
Unscoped Long-Term Memory Access Creates Cross-Project Data Exposure Risk
- Content
View full analysis
- Remediation
View remediation
Security audit
Atelier Litteraire : Redaction litteraire, avec idéation et processus itératif. plusieurs agents : idéation, rédaction, jury/correcteurs.
Security checks for vulnerabilities and agentic risk
Overview
The skill is a coherent local literary-writing workflow, but its Herbert agent automatically uses a shared long-term memory file that is not clearly scoped per project.
Install only if you are comfortable with a writing assistant keeping and reusing local long-term memory. For sensitive or multi-author workspaces, keep separate project directories, inspect or clear MEMORY.md between projects, and avoid storing confidential drafts or personal data there.
Vulnerability Patterns
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
This markdown file contains operational instructions exclusively in French, including session startup, writing rules, memory handling, and safety guidance. Under the language/locale policy rule, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly justified, which it is not here.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
This markdown file contains all operational instructions in French and does not indicate that users may choose another language or that the skill is restricted to a French-speaking context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 83% confidence
- Finding
The title, display name, and keywords indicate the skill is specifically oriented around French-language literary writing (e.g. "redaction", "romans courts", keyword "french"), but the manifest does not state that this locale is optional or limited to a justified region-specific use case. Under the language/locale policy, forcing a specific language without user opt-in can be a policy concern.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 86% confidence
- Finding
The natural-language description defines the agent persona entirely in French (for example, 'Agent écrivain' and 'Je challenge avant de valider') with no indication that users may choose another language. This can conflict with language/locale policy requirements when the skill implicitly constrains interaction language without explicit opt-in or justification.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 82% confidence
- Finding
Le contenu du skill est entièrement rédigé en français et le résumé décrit explicitement un agent en français, sans indiquer d'option de langue ou de consentement utilisateur. Cela peut constituer une contrainte implicite de langue/locale, ce qui entre dans la catégorie des violations de politique linguistique en langage naturel.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 84% confidence
- Finding
This markdown file contains user-facing natural-language instructions and description exclusively in French. Under the policy, forcing a specific language without user opt-in can be a locale/language policy violation when no alternative or choice is provided.
- Content