Security audit

Oracle-X Development

Security checks for vulnerabilities and agentic risk

Overview

This skill is a repo-specific development guide for Oracle-X and does not add hidden execution, persistence, credential access, or unrelated behavior.

Install this only when working on the Oracle-X repository. It is specialized development guidance and may be distracting or wrong for other FastAPI, Next.js, financial, or LLM projects.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Anti-Refusal Statement

High

Category: Anti-Refusal
Content: is dropped silently** — no error, no warning, just a provider nobody is
Confidence: 80% confidence
Finding: Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Vague Triggers

Medium

Confidence: 96% confidence
Finding: The description says to use the skill whenever work touches broad directories like backend/routers, backend/services, backend/tests, or frontend/lib, and whenever someone asks how to add common project elements. This activation scope is very expansive and lacks clear exclusions or negative examples, increasing the chance of unintended invocation for routine work that only incidentally involves those paths.

Natural-Language Policy Violations

Medium

Confidence: 98% confidence
Finding: The instruction 'Write code, identifiers and comments in English' imposes a language requirement. Under the policy, forcing a specific language without user choice or a clearly documented justified locale constraint is a natural-language policy violation.

Natural-Language Policy Violations

Medium

Confidence: 91% confidence
Finding: The markdown explicitly states that assertions cover 'the exact Turkish output strings,' which imposes a specific language/locale expectation. There is no accompanying opt-in, user choice, or explanation that this skill is intentionally region-specific, so this appears to violate the language/locale policy requirement.

Vague Triggers

Low

Confidence: 84% confidence
Finding: The phrase 'Consult it before writing the first line' reads like a broad behavioral instruction rather than a precise invocation condition. Without clearer boundaries on which changes require consultation, it may cause the skill to be invoked for loosely related work beyond its intended scope.

Static analysis

No suspicious patterns detected.