Security audit

paper-mail-retention

Security checks for vulnerabilities and agentic risk

Overview

This skill can recommend shredding important records before their retention requirements have been met.

Review before relying on purge mode. Confirm warranty expiration, payroll reconciliation, sale or move-out dates, and unresolved claims yourself before shredding anything. The script provides recommendations and does not destroy documents automatically.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Description-Behavior Mismatch

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: The promised event-dependent retention rules are not reliably enforced: purge mode can recommend shredding paystubs or warranties based only on age, without confirming reconciliation or expiration. In a skill explicitly intended to guide physical shredding, this can cause irreversible loss of evidence needed for payroll disputes or warranty claims. Keeping tax returns forever is conservative and is not itself a destructive vulnerability, although it does not implement the advertised paper-to-scan transition.
Content: No source excerpt is available for this finding.

Purge mode replaces event-based retention requirements with a one-year age threshold, recommending shredding before required events occur.

Medium

Category: Excessive Agency
Confidence: 100% confidence
Finding: The years == 0 branch assumes every retention event has occurred once a document is older than 365 days, then explicitly clears it for shredding. Age does not establish that a warranty expired, a W-2 was reconciled, or a replacement statement arrived, so following this purge guidance can irreversibly destroy still-needed records.
Content: No source excerpt is available for this finding.