Security audit

Ceo Advisor 2

Security checks for vulnerabilities and agentic risk

Overview

This CEO advisory skill provides disclosed strategic, financial, board, investor, and leadership guidance without hidden execution, persistence, or data exfiltration behavior.

Install only if you want Codex to assist with CEO-level strategic planning and business decision support. Avoid placing confidential company data in company-context.md unless you are comfortable having the assistant read it for this skill's advice, and treat budget, staffing, fundraising, legal, and investor-relations outputs as decision support rather than automatic approvals.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration

Findings (3)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: The declared description presents the skill as broad executive leadership and strategic guidance, including organizational development, stakeholder management, board presentations, investor updates, and culture/leadership support. However, the supplied code is narrowly focused on quantitative financial scenario analysis. Its primary function is to process base-case financial inputs and scenarios, project revenues/costs/cash flow over time, and compute financial metrics and recommendations. It does not implement organizational development, stakeholder management, board presentation preparation, investor communications, or general executive advisory behavior. While financial scenario planning can support strategy, the actual code's concrete capability is materially different and much narrower than the declared executive-leadership description, so this is a mismatch.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The description says to use the skill for broad situations like planning strategy and making executive decisions, and also when the user mentions general terms such as strategy or leadership. These are common business topics that could appear in many conversations, but the file does not provide exclusion conditions or narrower trigger constraints to distinguish when this skill should or should not activate.
Content: No source excerpt is available for this finding.

Autonomous Decision Making