Security audit

US Car Insurance Advisor

Security checks for vulnerabilities and agentic risk

Overview

This is a US car-insurance advice reference skill with no executable code, persistence, or hidden high-impact behavior found.

Reasonable to install if you want US-focused auto-insurance guidance. Treat premium estimates and legal/state-rule guidance as non-binding, avoid sharing exact sensitive financial details when a broad tier is enough, and verify requirements or claims decisions with a licensed agent or state regulator.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (16)

Ae1

High

Category: analysis-evasion
Content: For in-depth reference on any topic, see [knowledge-base.md](./knowledge-base.md) — a comprehensive knowledge base covering company profiles, coverage types, st
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected

Natural-Language Policy Violations

Medium

Confidence: 89% confidence
Finding: The guide includes state-specific windshield-law examples, US insurance constructs such as PIP, UM/UIM, 911, KBB/Edmunds/NADA, and references to state Departments of Insurance, but it does not explicitly state that the guidance is for US users only or provide a locale opt-in. This creates a natural-language locale policy issue because the skill presents jurisdiction-specific advice as generally applicable.

Whitespace Padding

Medium

Category: Prompt Injection
Content: ## Discount Categories | # | Discount | Typical Savings | Eligibility Criteria | | --- | -------------------------- | ---------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | 1 | Multi-car | 10-25% | Insure 2+ vehicles on same policy | | 2 | Multi-policy bundle | 5-25% | Bundle auto with home/renters/umbrella insurance. Homeowners get maximum savings |
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Whitespace Padding

Medium

Category: Prompt Injection
Content: | # | Discount | Typical Savings | Eligibility Criteria | | --- | -------------------------- | ---------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | 1 | Multi-car | 10-25% | Insure 2+ vehicles on same policy | | 2 | Multi-policy bundle | 5-25% | Bundle auto with home/renters/umbrella insurance. Homeowners get maximum savings | | 3 | Military/veteran | 5-15% (USAA up to 40%) | Active duty, veterans, military families. Check USAA first — typically cheapest. GEICO also strong military discounts | | 4 | Good student | 5-15% | Students under 25 with 3.0+ GPA. Provide transcript |
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Whitespace Padding

Medium

Category: Prompt Injection
Content: | # | Discount | Typical Savings | Eligibility Criteria | | --- | -------------------------- | ---------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | 1 | Multi-car | 10-25% | Insure 2+ vehicles on same policy | | 2 | Multi-policy bundle | 5-25% | Bundle auto with home/renters/umbrella insurance. Homeowners get maximum savings | | 3 | Military/veteran | 5-15% (USAA up to 40%) | Active duty, veterans, military families. Check USAA first — typically cheapest. GEICO also strong military discounts | | 4 | Good student | 5-15% | Students under 25 with 3.0+ GPA. Provide transcript | | 5 | Telematics/usage-based | 5-40% | Install app/device to track driving habits. Programs: Progressive Snapshot, State Farm Drive Safe & Save, Nationwide SmartRide (up to 40%), Allstate Drivewise. Best if you drive safely and not during high-risk hours |
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Whitespace Padding

Medium

Category: Prompt Injection
Content: | --- | -------------------------- | ---------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | 1 | Multi-car | 10-25% | Insure 2+ vehicles on same policy | | 2 | Multi-policy bundle | 5-25% | Bundle auto with home/renters/umbrella insurance. Homeowners get maximum savings | | 3 | Military/veteran | 5-15% (USAA up to 40%) | Active duty, veterans, military families. Check USAA first — typically cheapest. GEICO also strong military discounts | | 4 | Good student | 5-15% | Students under 25 with 3.0+ GPA. Provide transcript | | 5 | Telematics/usage-based | 5-40% | Install app/device to track driving habits. Programs: Progressive Snapshot, State Farm Drive Safe & Save, Nationwide SmartRide (up to 40%), Allstate Drivewise. Best if you drive safely and not during high-risk hours | | 6 | Anti-theft device | 5-25% | VIN etching, LoJack, factory alarms, vehicle recovery systems |
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Whitespace Padding

Medium

Category: Prompt Injection
Content: | 1 | Multi-car | 10-25% | Insure 2+ vehicles on same policy | | 2 | Multi-policy bundle | 5-25% | Bundle auto with home/renters/umbrella insurance. Homeowners get maximum savings | | 3 | Military/veteran | 5-15% (USAA up to 40%) | Active duty, veterans, military families. Check USAA first — typically cheapest. GEICO also strong military discounts | | 4 | Good student | 5-15% | Students under 25 with 3.0+ GPA. Provide transcript | | 5 | Telematics/usage-based | 5-40% | Install app/device to track driving habits. Programs: Progressive Snapshot, State Farm Drive Safe & Save, Nationwide SmartRide (up to 40%), Allstate Drivewise. Best if you drive safely and not during high-risk hours | | 6 | Anti-theft device | 5-25% | VIN etching, LoJack, factory alarms, vehicle recovery systems | | 7 | Defensive driving course | 5-10% | Complete state-approved course (often available online for ~$25-50). Provide completion certificate |
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Whitespace Padding

Medium

Category: Prompt Injection
Content: | 3 | Military/veteran | 5-15% (USAA up to 40%) | Active duty, veterans, military families. Check USAA first — typically cheapest. GEICO also strong military discounts | | 4 | Good student | 5-15% | Students under 25 with 3.0+ GPA. Provide transcript | | 5 | Telematics/usage-based | 5-40% | Install app/device to track driving habits. Programs: Progressive Snapshot, State Farm Drive Safe & Save, Nationwide SmartRide (up to 40%), Allstate Drivewise. Best if you drive safely and not during high-risk hours | | 6 | Anti-theft device | 5-25% | VIN etching, LoJack, factory alarms, vehicle recovery systems | | 7 | Defensive driving course | 5-10% | Complete state-approved course (often available online for ~$25-50). Provide completion certificate | | 8 | Pay-in-full | 5-14% | Pay 6-month or full annual premium upfront instead of monthly | | 9 | Autopay/EFT | 2-5% | Set up automatic bank draft payments |
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Whitespace Padding

Medium

Category: Prompt Injection
Content: | 3 | Military/veteran | 5-15% (USAA up to 40%) | Active duty, veterans, military families. Check USAA first — typically cheapest. GEICO also strong military discounts | | 4 | Good student | 5-15% | Students under 25 with 3.0+ GPA. Provide transcript | | 5 | Telematics/usage-based | 5-40% | Install app/device to track driving habits. Programs: Progressive Snapshot, State Farm Drive Safe & Save, Nationwide SmartRide (up to 40%), Allstate Drivewise. Best if you drive safely and not during high-risk hours | | 6 | Anti-theft device | 5-25% | VIN etching, LoJack, factory alarms, vehicle recovery systems | | 7 | Defensive driving course | 5-10% | Complete state-approved course (often available online for ~$25-50). Provide completion certificate | | 8 | Pay-in-full | 5-14% | Pay 6-month or full annual premium upfront instead of monthly | | 9 | Autopay/EFT | 2-5% | Set up automatic bank draft payments |
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Whitespace Padding

Medium

Category: Prompt Injection
Content: | 4 | Good student | 5-15% | Students under 25 with 3.0+ GPA. Provide transcript | | 5 | Telematics/usage-based | 5-40% | Install app/device to track driving habits. Programs: Progressive Snapshot, State Farm Drive Safe & Save, Nationwide SmartRide (up to 40%), Allstate Drivewise. Best if you drive safely and not during high-risk hours | | 6 | Anti-theft device | 5-25% | VIN etching, LoJack, factory alarms, vehicle recovery systems | | 7 | Defensive driving course | 5-10% | Complete state-approved course (often available online for ~$25-50). Provide completion certificate | | 8 | Pay-in-full | 5-14% | Pay 6-month or full annual premium upfront instead of monthly | | 9 | Autopay/EFT | 2-5% | Set up automatic bank draft payments | | 10 | Paperless/e-billing | 2-5% | Opt into electronic documents and billing |
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Whitespace Padding

Medium

Category: Prompt Injection
Content: | 6 | Anti-theft device | 5-25% | VIN etching, LoJack, factory alarms, vehicle recovery systems | | 7 | Defensive driving course | 5-10% | Complete state-approved course (often available online for ~$25-50). Provide completion certificate | | 8 | Pay-in-full | 5-14% | Pay 6-month or full annual premium upfront instead of monthly | | 9 | Autopay/EFT | 2-5% | Set up automatic bank draft payments | | 10 | Paperless/e-billing | 2-5% | Opt into electronic documents and billing | | 11 | Homeowner | 3-8% | Homeowners are seen as lower risk even without bundling. Available regardless of where home is insured | | 12 | Mature driver (55+) | 5-10% | Complete AARP Smart Driver or similar course. Check The Hartford for AARP partnership rates |
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Whitespace Padding

Medium

Category: Prompt Injection
Content: | 7 | Defensive driving course | 5-10% | Complete state-approved course (often available online for ~$25-50). Provide completion certificate | | 8 | Pay-in-full | 5-14% | Pay 6-month or full annual premium upfront instead of monthly | | 9 | Autopay/EFT | 2-5% | Set up automatic bank draft payments | | 10 | Paperless/e-billing | 2-5% | Opt into electronic documents and billing | | 11 | Homeowner | 3-8% | Homeowners are seen as lower risk even without bundling. Available regardless of where home is insured | | 12 | Mature driver (55+) | 5-10% | Complete AARP Smart Driver or similar course. Check The Hartford for AARP partnership rates | | 13 | Loyalty/long-term customer | 3-10% | Stay with same insurer for 3+ years. BUT: re-shop every 2-3 years as loyalty tax can outweigh loyalty discount |
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Whitespace Padding

Medium

Category: Prompt Injection
Content: | 8 | Pay-in-full | 5-14% | Pay 6-month or full annual premium upfront instead of monthly | | 9 | Autopay/EFT | 2-5% | Set up automatic bank draft payments | | 10 | Paperless/e-billing | 2-5% | Opt into electronic documents and billing | | 11 | Homeowner | 3-8% | Homeowners are seen as lower risk even without bundling. Available regardless of where home is insured | | 12 | Mature driver (55+) | 5-10% | Complete AARP Smart Driver or similar course. Check The Hartford for AARP partnership rates | | 13 | Loyalty/long-term customer | 3-10% | Stay with same insurer for 3+ years. BUT: re-shop every 2-3 years as loyalty tax can outweigh loyalty discount |
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Whitespace Padding

Medium

Category: Prompt Injection
Content: | 9 | Autopay/EFT | 2-5% | Set up automatic bank draft payments | | 10 | Paperless/e-billing | 2-5% | Opt into electronic documents and billing | | 11 | Homeowner | 3-8% | Homeowners are seen as lower risk even without bundling. Available regardless of where home is insured | | 12 | Mature driver (55+) | 5-10% | Complete AARP Smart Driver or similar course. Check The Hartford for AARP partnership rates | | 13 | Loyalty/long-term customer | 3-10% | Stay with same insurer for 3+ years. BUT: re-shop every 2-3 years as loyalty tax can outweigh loyalty discount |
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Whitespace Padding

Medium

Category: Prompt Injection
Content: | 10 | Paperless/e-billing | 2-5% | Opt into electronic documents and billing | | 11 | Homeowner | 3-8% | Homeowners are seen as lower risk even without bundling. Available regardless of where home is insured | | 12 | Mature driver (55+) | 5-10% | Complete AARP Smart Driver or similar course. Check The Hartford for AARP partnership rates | | 13 | Loyalty/long-term customer | 3-10% | Stay with same insurer for 3+ years. BUT: re-shop every 2-3 years as loyalty tax can outweigh loyalty discount | ## Estimated Combined Savings
Confidence: 70% confidence
Finding: Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill instructs the agent to use a user's credit tier as a pricing factor without any warning, consent prompt, or note that credit-based insurance scoring is sensitive and regulated. In a consumer-facing insurance advisor, this can normalize collection or inference of financial-profile data and lead to privacy, compliance, and unfairness risks, especially because credit use is restricted or prohibited in some jurisdictions and contexts.

Static analysis

No suspicious patterns detected.