Security audit

Options

Security checks for vulnerabilities and agentic risk

Overview

This skill looks like a local logging tool for financial notes, but it overstates options-trading analysis/reporting capabilities and stores free-form entries persistently in plaintext.

Review this before installing if you expect real options-trade analysis or reports. It appears to retain whatever you type into its commands as local plaintext logs, so avoid entering account identifiers, private strategy details, or other sensitive financial data unless you are comfortable managing those files yourself.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration

Findings (9)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: The description presents a domain-specific options trading tracker/reviewer with trend analysis and exportable position reports. The code does not implement options-trade concepts such as symbols, contracts, strikes, expirations, positions, P/L, or trend calculations. Instead, it is a generic shell utility that records arbitrary input strings into command-specific log files, shows recent entries, searches text, counts lines, reports data-directory status, and exports raw logs. While there is some overlap with 'logging' and 'exporting summaries,' the primary behavior is materially broader and more generic than the declared purpose, and the claimed analysis/reporting capabilities are not actually implemented.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

High

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The manifest describes a domain-specific tool for tracking options trades, reviewing positions, trend analysis, and exporting position reports. In contrast, the script merely records arbitrary input strings under generic commands like run, convert, generate, batch, config, and report, with no parsing, validation, position modeling, or trade analysis functionality.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The manifest description says to use the skill when 'tracking trades, reviewing positions, exporting trade summaries,' which are broad natural-language situations rather than specific invocation phrases or bounded conditions. Without explicit trigger phrases, exclusions, or scope limits, this could overlap with common finance-related conversation and cause unintended activation.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The text describes a focused local utility for logging entries, reviewing trends, and exporting reports, yet the later command table mixes placeholder-like entries and generic command/output patterns rather than options-specific operations. This is not merely incomplete documentation; it actively conveys a different tool identity than the stated purpose.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The manifest says the skill is for logging and reviewing options trades with trend analysis and exportable position reports, but the command list is dominated by generic verbs like run, convert, generate, preview, batch, compare, and config without any trade- or position-specific semantics. This indicates the documented behavior does not match the claimed focused options-tracking purpose.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: Entries such as 'Run,' 'Check,' 'Convert,' 'Analyze,' 'Generate,' and 'Preview' are highly generic and provide little context about their options-trading scope. In markdown skill descriptions, this kind of unspecific wording increases the risk of matching everyday requests that are unrelated to this tool's intended domain.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The inline documentation labels the script as 'Options' and advertises commands such as analyze, export, report, and stats, implying a meaningful toolkit. However, the actual command handlers only append free-form input to log files and echo counts, which contradicts the apparent intent of a specialized options-trading utility.
Content: No source excerpt is available for this finding.

Ssd 3

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The script persistently stores arbitrary user-provided input under the user's home directory and later exposes it via search, recent, status, and export functions without minimization, redaction, or access controls. In the context of trade tracking, users may enter sensitive financial notes, account identifiers, or strategy details, so broad plaintext retention creates a meaningful confidentiality risk on shared systems or when logs are later exported.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: Commands like convert, generate, preview, batch, config, and run are broad generic capabilities with no clear connection to logging or reviewing options trades. Their handlers simply persist arbitrary user input, expanding the skill into a catch-all activity logger rather than a focused trading tool.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.