Security audit

Signal Intelligence Pack

Security checks for vulnerabilities and agentic risk

Overview

This skill is a markdown-only research grounding workflow that is coherent with its stated purpose and does not show hidden execution, persistence, credential access, or destructive behavior.

Install this when you want agents to perform structured external research before analysis. Be aware that it may increase search/tool usage and expose search queries to configured external search providers; avoid using it for local-only or privacy-sensitive tasks that do not require web grounding.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The skill’s trigger conditions are very broad ('tasks relying on external information', 'multi-source grounding', 'time-window sensitive'), which can cause it to activate in many contexts without clear exclusions. In an agent pipeline, this over-breadth can inappropriately interpose search/grounding behavior before sensitive or simple tasks, increasing attack surface, cost, data exposure, and the chance of tool misuse or prompt-routing errors.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The manifest description and the file content are written as a Chinese-only operating specification, with no indication that users may select another language or that the restriction is region-specific. Under the policy, forcing a specific language without opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The file’s instructional content, headings, example inputs, and outputs are all presented in Chinese, with no indication that users may choose another language or that the skill is region-specific. This can violate language/locale policy when a skill implicitly forces one language without user opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 82% confidence
Finding: This markdown file is written as a skill improvement/specification document entirely in Chinese, beginning with a Chinese-only title. Under the stated policy, forcing a specific language without offering user choice or documenting a justified locale constraint can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The file's headings, field descriptions, enumerated explanations, and recommendations are written entirely in Chinese, which signals a fixed language/locale expectation for the skill's interface and outputs. There is no visible statement offering users a language choice or explaining that the skill is intentionally region-specific, which matches the locale-policy violation criteria.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The file title and all operational guidance are written entirely in Chinese, indicating the skill documentation prescribes a single language/locale by default. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless a regional constraint is clearly documented and justified, which is not present here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The file is written entirely in Chinese and presents the workflow as the required operating format, with no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.