Security audit

Bio Reabilita Z

Security checks for vulnerabilities and agentic risk

Overview

This skill is not malware, but it gives advanced medical rehabilitation, hormone, and experimental-compound guidance without clear medical safety limits.

Review this skill carefully before installing. It appears to be a non-executable Portuguese medical-rehabilitation guide, but it should not be used as treatment advice unless rewritten to make clinician supervision, emergency care boundaries, drug and hormone risks, and investigational-status warnings explicit.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

High

Confidence: 96% confidence
Finding: The skill presents a medical rehabilitation protocol involving biometric monitoring and the administration of nootropics, but it does not include basic safety warnings, contraindications, clinician oversight requirements, or limits on self-treatment. In a health context, this omission can cause users to act on medical guidance without understanding risks such as adverse drug effects, inappropriate monitoring interpretation, or delayed professional care.

Missing User Warnings

High

Confidence: 99% confidence
Finding: The update proposes hormone optimization, experimental regeneration concepts, and BPC-157-related recovery goals targeting sciatic nerve injury and hip osteonecrosis, again without warnings about unapproved or experimental interventions, endocrine risks, dosing uncertainty, or the need for physician supervision. This is especially dangerous because it frames speculative biomedical interventions as part of a practical recovery protocol for a named operator, which could encourage unsafe self-experimentation or off-label drug use.

Natural-Language Policy Violations

Medium

Confidence: 86% confidence
Finding: The skill content is presented entirely in Portuguese, and there is no indication that the language choice is optional or that the skill is intentionally restricted to a Portuguese-speaking audience. This can violate language/locale policy when users are not given an explicit opt-in or justified regional scope.

Static analysis

No suspicious patterns detected.