Security audit

Issue Register

Security checks for vulnerabilities and agentic risk

Overview

The skill appears intended to manage issue records in WizNote, but it can automatically read and rewrite collaborative issue notes with unclear project scoping.

Review the configured project name, category path, and overview docGuid before installing. Use this only in a WizNote workspace where it is acceptable for the agent to create issue notes, update existing issue notes, and rebuild the overview from matching issue records; the publisher should ideally scope overview searches to the selected project path and show the resolved target before writing.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill is designed to read a default project from config and then create notes under a fixed path without asking the user unless they explicitly override it. That creates a consent and integrity risk: a user may believe they are merely recording an issue, while the skill writes into a specific workspace/project and can misfile or alter records in the wrong location.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The overview update logic requires searching for all issue notes, reading each note, extracting metadata, and rewriting the overview document. Without a clear warning and scope limitation, this can unexpectedly process unrelated or sensitive issue records and can propagate parsing errors or stale data into a regenerated overview, affecting both privacy and record integrity.

Natural-Language Policy Violations

Medium

Confidence: 91% confidence
Finding: This markdown file presents all user-facing configuration labels in Chinese, which can impose a specific language on users without any opt-in or explanation. The policy allows locale constraints only when choice or clear justification is provided, neither of which appears here.

Natural-Language Policy Violations

Low

Confidence: 77% confidence
Finding: The skill description and activation are defined only in Chinese, with no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without opt-in is a natural-language policy concern unless the locale restriction is explicitly justified.

Static analysis

No suspicious patterns detected.