Security audit

Portfolio Copilot

Security checks for vulnerabilities and agentic risk

Overview

This skill is a read-only Paradex portfolio briefing helper with some broad trigger wording but no hidden execution, persistence, or destructive behavior.

Install this only if you want the agent to read and summarize your Paradex financial account data. When using it, phrase requests with clear Paradex context to avoid accidental disclosure from generic prompts like "status" or "balance."

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Vague Triggers

High

Confidence: 97% confidence
Finding: The skill description includes broad, conversational trigger phrases like "my account," "how did I do," and "show me my stuff," which can cause the skill to activate for loosely related requests rather than clearly scoped Paradex portfolio queries. Over-broad activation increases the chance of unintended access to sensitive account data or routing user requests away from a more appropriate skill, especially in an environment with multiple finance- or account-related skills.

Vague Triggers

Medium

Confidence: 96% confidence
Finding: The trigger phrase "Status" is extremely generic and can match many unrelated user utterances, increasing the chance this portfolio skill activates outside its intended scope. In a finance context, accidental activation can expose sensitive account summaries, positions, or P&L when the user did not explicitly request Paradex portfolio information.

Vague Triggers

Medium

Confidence: 95% confidence
Finding: The phrase "Give me a briefing" is ambiguous because it could refer to news, meetings, weather, or many other domains, not specifically a Paradex portfolio. This can cause over-triggering of a skill that returns sensitive financial information, creating privacy and context-confusion risks.

Vague Triggers

Medium

Confidence: 95% confidence
Finding: The trigger phrase "Balance" is highly generic and commonly used in unrelated contexts such as physical balance, work-life balance, or bank accounts other than Paradex. Because this skill surfaces account equity and available funds, an overly broad trigger raises the risk of unintended disclosure of private financial data.

Static analysis

No suspicious patterns detected.