Back to skill

Security audit

Executive Function Support

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent executive-function support skill with no executable code, but users should be aware that it may reuse planning and time-tracking context across sessions if the host system stores it.

Install only if you want an agent to help structure tasks, plans, reminders, and work sessions. Review the host application's memory and tool permissions first, especially whether it can save task history or time-tracking patterns across sessions; disable those features if you do not want that continuity.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
80% confidence
Finding

Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Content

Scanner excerpt · SKILL.md (reported line 180)May include surrounding context.

md
### Review & reflection
Use when: at the end of a work session or day.
What it does: captures what got done, what didn't (without judgment), and notes patterns.

## Working with time

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The activation guidance is very broad and can trigger on common statements like feeling stressed, unfocused, or overwhelmed, which risks routing ordinary conversations into this skill when the user did not clearly request it. In a support-oriented skill, over-invocation can lead to unnecessary collection of sensitive behavioral context and inappropriate steering of the conversation.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The skill instructs the system to carry forward prior-session context and time-tracking patterns, but it does not clearly require user consent, retention limits, or a privacy notice. Because this skill deals with potentially sensitive mental-health-adjacent and productivity data, silent persistence increases privacy and profiling risk.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.