Security audit

Payroll GL Reconciliation

Security checks for vulnerabilities and agentic risk

Overview

The skill is a disclosed payroll reconciliation workflow with expected local outputs and cache behavior, but users should handle the payroll data and dependency installation carefully.

Before installing, use a dedicated virtual environment and consider pinning openpyxl to a reviewed version. Run this only in an environment appropriate for payroll data, protect the generated workbook and .cache/payroll-reconciliation/{slug}.json file, and delete or relocate the cache according to your retention policy.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:226
Finding: Unpinned Third-Party Dependency Installation
Content: View full analysis
Remediation: View remediation
``` 2. Place dependencies in a version-controlled requirements or lock file and install from that file: ```bash python3 -m pip install -r requirements.txt ``` 3. Record cryptographic hashes and enforce them during installation: ```bash python3 -m pip install --require-hashes -r requirements.txt ``` 4. Generate the lock file through a controlled dependency-review process and update it only after compatibility and security testing. 5. Install dependencies inside a dedicated virtual environment under a non-privileged account: ```bash python3 -m venv .venv . .venv/bin/activate python3 -m pip install --require-hashes -r requirements.txt ``` 6. In higher-assurance environments, use an approved internal package mirror, restrict fallback to public indexes, and retain provenance or software-bill-of-materials records for installed artifacts. 7. Run vulnerability and license scanning against the resolved dependency set before deployment. ]]>

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The skill explicitly documents persistence of payroll reconciliation change data in a local cache file but does not surface this as a warning in the user-facing description or usage guidance. Because this workflow handles payroll and employee-related financial data, undisclosed local persistence can create confidentiality and retention risks, especially on shared workstations, CI runners, or managed close-process environments.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.