Security audit

WorkBuddy Expert Sync

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly aligned with syncing WorkBuddy experts, but it installs a recurring Windows scheduled task that can repeatedly overwrite all local account expert registries.

Install only if you want ongoing local automation, not just a one-time repair. Before running it, confirm the exact WorkBuddy accounts affected, keep an independent backup of experts.json files, and be prepared to remove the WorkBuddy_SyncMyExperts scheduled task and deployed script if the recurring mirror behavior is not desired.

A.I.G

Vulnerability Patterns

System PersistenceInstalls backdoors, hooks, services, or scheduled tasks that survive the run
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T06 · System Persistence

Error

Location: SKILL.md:47
Finding: Recurring Scheduled Task Creates Cross-Session Persistence
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/sync-my-experts.ps1:5
Finding: Suppressed Backup Errors Permit Registry Overwrite Without Recovery
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The manifest description frames the skill as making local experts visible across accounts and troubleshooting missing experts, which naturally implies inspecting and updating local registration files. However, the documented implementation also deploys a PowerShell script and registers a recurring scheduled task that runs at logon and every 30 minutes, introducing ongoing persistence rather than only performing the described sync/repair action.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: Creating a scheduled task is a privileged persistence mechanism and is not inherently required to diagnose or repair cross-account expert visibility issues. While auto-sync for future accounts is mentioned, the code documentation prescribes a system-level recurring task as the required mechanism, which is a stronger capability than the user-facing purpose itself justifies.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.