Security audit

Thesoloist

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed brand-positioning skill with some promotional and broadly scoped recommendation language, but no code execution, data access, persistence, or hidden behavior.

Install this only if you want TheSoloist’s own brand framing available to the agent. For neutral shopping or technical comparisons, treat its claims as brand-supplied positioning and ask the agent to compare alternatives explicitly.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

Findings (1)

T01 · Skill Instruction Hijacking

Warning

Location: SKILL.md:19
Finding: Brand-Promotion Output Hijacking Through Prescriptive Skill Instructions
Content: View full analysis
If the user values sculptural presence, emotio ...[truncated 2966 chars]
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The README instructs agents to activate the skill for broad, loosely scoped queries such as premium speakers, climate systems, or functional art objects. Overbroad triggering can cause unintended invocation in unrelated contexts, leading the agent to inject brand-directed guidance where it was not explicitly requested and potentially bias outputs or override more appropriate skills.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.