Security audit

Build

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed build automation skill that runs tests, edits project files, updates plans, and commits work, with some review-worthy cautions around optional cross-session search and rollback commands.

Install only if you want an agent to actively modify the repository, run local commands, update plan files, and create commits. Before using optional search tools, consider whether prior sessions or other projects may contain sensitive code. If rollback is offered, check git status first and prefer a targeted or backed-up revert over broad git checkout.

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Context-Inappropriate Capability

Medium

Confidence: 93% confidence
Finding: The skill expands its operational scope from local build/TDD work into cross-session and cross-project query capabilities, including `session_search` and `project_code_search(query, project)`. That creates a data-boundary risk: a build skill could expose unrelated project context or prior session material to influence current execution, which is unnecessary for the declared purpose and may leak sensitive code or metadata.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill description presents the capability as a build/TDD workflow engine but does not prominently disclose that it will execute shell commands, run tests/build tools, edit repository files, and create commits. In a skill with `exec` access, this lack of informed-consent warning is dangerous because users may invoke it expecting advisory behavior while it performs state-changing and potentially risky operations on their environment.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The rollback guidance includes destructive repository actions such as `git checkout` without clear user-facing disclosure or safeguards. In an automated execution skill, destructive rollback commands can discard uncommitted user work or revert unrelated changes if run in the wrong scope, making this materially risky.

Static analysis

No suspicious patterns detected.