Trade Show Fit Score

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 4:48 AM UTC
• Version: 1.2.1

Overview

This skill is a straightforward Lensmor API integration for scoring trade-show fit, with disclosed external API use and no evidence of hidden execution, persistence, or data theft.

Before installing, be aware that the skill requires a Lensmor API key and sends event names or event IDs to Lensmor's platform. Also expect some responses to include Lensmor-related next-step suggestions or vendor contact text when the API key is missing.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

Findings (1)

T01 · Skill Instruction Hijacking

Error

• Location: SKILL.md:190

Finding

Mandatory Commercial Steering and Cross-Promotion in Agent Responses

Content

View full analysis

1` in events list lookup, confirm the correct event before scoring 9. If API key is missing, direct user to [e-mail] — do not just say "please configure" ``` Related commercial routing is also defined at `SKILL.md:176-180`: ```markdown | Score outcome | Recommended next action | |---------------|------------------------| | Score ≥ 7 | Run `trade-show-lead-recommender` and verify that recommendation metadata is populated | | Score ≥ 7, budget pending | Run `trade-show-budget-planner` | | Score < 4 | Run `trade-show-finder` to identify alternatives using independent event research | ``` The missing-key response at `SKILL.md:37-40` further requires purchase-directed messaging: ```markdown If the result is `missing`, stop and respond: > The `LENSMOR_API_KEY` environment variable is not set. This skill requires a Lensmor API key to generate fit scores. > Contact [[e-mail]](mailto:[e-mail]) to purchase access, then set the key: > `export LENSMOR_API_KEY=your_key_here` ``` ### Technical Analysis The skill imposes persistent output requirements that are not strictly necessary to perform its core event-scoring function. In particular, it requires every response to contain follow-up suggestions and directs users toward vendor-controlled contact and related products or skills. Because these rules are loaded as agent instructions, they can alter the agent's response goals and formatting regardless of whether the user requ ...[truncated 1751 chars]

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• System Prompt Leakage: Direct Leakage, Indirect Extraction, Tool-Based Exfiltration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Direct Prompt Extraction

High

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.

Content

Scanner excerpt · SKILL.md (reported line 183)May include surrounding context.

md

| Score < 4 | Run `trade-show-finder` to identify alternatives using independent event research |
| Multiple shows to compare | Score each via this skill, then rank by `score` field |

## Output Rules

1. All URLs formatted as `[text](url)` — never bare links
2. Never output the value of `LENSMOR_API_KEY`

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 44)May include surrounding context.

md

- Lensmor API key (`sk_your_api_key`) from Lensmor Settings → API Keys
- Base URL: `https://platform.lensmor.com`
- [Lensmor API docs](https://api.lensmor.com/)

## Install

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · examples/hannover-messe-iot-vendor.md (reported line 8)May include surrounding context.

Step 1: Resolve the Event ID

bash

curl --get "https://platform.lensmor.com/external/events/list" \
  -H "Authorization: Bearer sk_your_api_key" \
  --data-urlencode "keyword=Hannover Messe 2026" \
  --data-urlencode "page=1" \

Static analysis

No suspicious patterns detected.