Security audit

Log To Alert

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward helper that turns user-provided logs into alert-rule drafts and does not install code, deploy changes, persist data, or contact external systems.

Safe to install for drafting alert rules from logs. Before pasting logs or providing file paths, redact API keys, tokens, cookies, session IDs, customer data, internal hostnames, and other sensitive operational details.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 88% confidence
Finding: The trigger condition is broad enough to activate on ordinary log-analysis or alert-discussion requests, which can cause the skill to run when the user did not explicitly intend this specialized transformation. Over-broad activation increases the chance of inappropriate tool routing, unintended processing of pasted logs, and surprising outputs in contexts where the user only wanted explanation or troubleshooting rather than alert generation.

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The trigger condition is broad enough to overlap with common user requests about logs, monitoring, or rule creation, which can cause the skill to activate unintentionally in unrelated contexts. In an agent environment, misrouting user input to the wrong skill can lead to incorrect automation, unexpected processing of sensitive log data, or alert rules being generated when the user did not explicitly intend that action.

Static analysis

No suspicious patterns detected.