Security audit

Memory Tiering

Security checks for vulnerabilities and agentic risk

Overview

This memory-management skill is not malicious, but it can automatically read and rewrite broad memory files, logs, and possible credentials without enough user control.

Review this skill before installing if your agent memory may contain secrets, private logs, or important audit history. It should be used only with explicit user review, backups or version history, mandatory secret redaction, and clear limits on which memory files and date ranges may be processed.

A.I.G

Vulnerability Patterns

Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (3)

T05 · Unauthorized Access and Privilege Escalation

Error

Location: SKILL.md:12
Finding: Unrestricted Access to Sensitive Agent Memory and Daily Logs
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:35
Finding: Plaintext Credentials Permitted in HOT Memory
Content: View full analysis
Remediation: View remediation

T02 · Agent Memory Poisoning

Error

Location: SKILL.md:26
Finding: Untrusted Session and Log Content Can Be Promoted into Persistent Memory
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The skill instructs the agent to read and modify multiple memory files and daily logs, which may contain sensitive user data or references to credentials, but it does not clearly warn about that access scope or require confirmation before bulk inspection. In a memory-management skill, this increases the chance of over-collection, unintended exposure, or unsafe handling of sensitive material during reorganization.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The pruning and summarization step authorizes removal or replacement of stored details without an explicit data-loss warning, backup requirement, or reversible process. In a skill designed to reorganize memory, this can lead to irreversible loss of important context, security-relevant audit history, or references needed for later validation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 78% confidence
Finding: The usage trigger lists both an English and a Chinese phrase, but the document does not explain whether multilingual triggering is optional, configurable, or user-selected. This can create an implicit locale/language behavior without explicit opt-in or policy justification.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.