Security audit

Laylatul Qadr Guide

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Ramadan worship-planning guide, with some privacy and trigger-scope caveats but no evidence of exfiltration, destructive behavior, or hidden privileged actions.

Install this if you want an Islamic Ramadan and Laylatul Qadr planning assistant. Be aware it may activate for broad Ramadan discussions, its generated HTML checklist can save progress locally in your browser, and opening the template online may contact Google Fonts unless fonts are made local or network access is blocked.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Note

Location: templates/dua-book-template.html:8
Finding: Remote Google Fonts Dependency Causes Metadata Disclosure and Supply-Chain Exposure
Content: View full analysis
Remediation: View remediation
``` 5. If remote fonts must remain, disclose the outbound request to users and configure an appropriate referrer policy. Self-hosting is preferable because Subresource Integrity is not straightforward for a dynamically generated Google Fonts stylesheet. 6. Test the completed artifact with network access disabled and verify that it remains fully functional and visually acceptable. ]]>

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Rogue AgentSelf-Modification, Session Persistence
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration

Findings (7)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The README states the skill will 'automatically trigger for Ramadan-related queries,' while the metadata also describes a wide range of activation phrases and contexts. Broad automatic invocation can cause the skill to activate when users did not explicitly request religious guidance, increasing the chance of unwanted context capture, inappropriate intervention, or overshadowing other more relevant skills.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The skill description casts a very wide net over Ramadan-related topics, including general preparation, schedules, family balance, and personalized planning. This can cause unintended invocation outside the user's actual intent, leading to oversharing of sensitive religious/lifestyle guidance, reduced user autonomy, and incorrect routing when a more appropriate general assistant or specialist should respond.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The instruction that the skill should trigger proactively during Ramadan season is insufficiently bounded by user intent, timing, or context. A proactive trigger can surface the skill when the user is discussing Ramadan only tangentially, increasing the chance of unsolicited guidance, privacy-invasive personalization, and inappropriate workflow takeover by the skill.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 82% confidence
Finding: Line L485 states 'The behavioral change must come first - then Allah's grace amplifies it' as a universal directive. This enforces a specific faith-based framing in natural language without indicating that the guidance is only for users who explicitly want Islamic devotional content.
Content: No source excerpt is available for this finding.

Session Persistence

Medium

Category: Rogue Agent
Confidence: 82% confidence
Finding: The code restores saved checkbox state from localStorage, creating session-to-session persistence of user interaction data. In this skill's context, the persisted data reflects religious observance habits, which makes the privacy sensitivity somewhat higher even though the mechanism itself is simple and local to the browser.
Content: Scanner excerpt · templates/dua-book-template.html (reported line 565)May include surrounding context.
html
localStorage.setItem(this.id, this.checked); }); // Load saved state const saved = localStorage.getItem(checkbox.id); if (saved === 'true') checkbox.checked = true; });

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 79% confidence
Finding: The language support section states 'Currently: English with Arabic duas' without indicating that users can choose another language or opt in to this constraint. This can be read as forcing a specific language/locale, which may conflict with organizational language-choice expectations absent justification or user choice.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The template stores a user's devotional checklist state in browser localStorage, which creates persistent client-side tracking of religious practice activity. While the data is not highly sensitive by itself and no exfiltration is present, storing faith-related behavioral data is privacy-relevant and exceeds what is strictly necessary for rendering a static dua book.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.