Back to skill

Security audit

Content Ideas Generator

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward content-outline generator that asks for user-supplied material, may fetch user-supplied URLs, and saves generated outlines to a local markdown file.

Installers should understand that generated outline files may retain excerpts or derivative ideas from the material they provide. Avoid submitting highly sensitive journal entries or private documents unless saving that derived output locally is acceptable, and only provide URLs whose contents you want analyzed.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill invites users to submit personal notes or journal entries and later saves generated output to a timestamped file, but it does not warn that sensitive user-provided material may be persisted to disk in derivative form. This is dangerous because users may disclose private or intimate content without informed consent about retention, increasing privacy and data handling risk.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
97% confidence
Finding

The skill explicitly accepts user-provided URLs and instructs the agent to fetch them, but it does not warn users that external content will be retrieved and analyzed. This creates a transparency and consent issue because users may not realize that submitting a URL causes network access and ingestion of third-party content.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.