Security audit

case_search

Security checks for vulnerabilities and agentic risk

Overview

This legal case lookup skill is mostly coherent, but it can automatically send sensitive legal scenarios to an external search tool without a consent or minimization step.

Review this skill before installing if users may describe confidential, identifying, or privileged legal facts. Prefer using it with anonymized scenarios, and add or require a consent step before any tavily_search fallback.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (8)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The skill description is broad enough to trigger on many legal-query phrasings without clear boundaries, which can cause unintended activation and automatic handling of sensitive legal requests. In this skill, that risk is amplified because activation can lead to file access, database queries, and fallback external search, increasing the chance of unnecessary data exposure or use of the wrong retrieval path.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill instructs the agent to fall back to a network search tool when no local match is found, but provides no notice, consent step, or data-minimization guidance before transmitting the user's legal scenario externally. Because user case descriptions may contain sensitive personal or legal facts, this can result in unintended disclosure of confidential information to third-party services.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 84% confidence
Finding: This markdown file contains numerous named legal case summaries involving divorce, assets, and at least one domestic-violence matter. Under the markdown-specific warning criterion, the description lacks any notice about the sensitivity of personal/legal information or cautions on responsible handling, privacy, or potential harm from using such content.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The description, examples, and required output format are entirely in Chinese and the instructions mandate strict output in that format without offering any language or locale choice. This can violate language/locale policy when users have not opted into Chinese output.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 85% confidence
Finding: The markdown content is entirely in Chinese and provides no indication that other languages are supported or that the user can choose a locale. Under the policy criteria, fixed language behavior without opt-in can be a natural-language policy violation unless clearly documented as region-specific or optional.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The file content is entirely in Chinese and provides no indication that users may select another language or locale. Under the stated policy, a skill that imposes a specific language without opt-in can constitute a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 97% confidence
Finding: This markdown file presents all case information exclusively in Chinese, and there is no indication that users can opt into another language or that the file is intentionally limited to a Chinese-speaking or region-specific audience. Under the language/locale policy rule, forcing a specific language without opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: This markdown file presents all case information exclusively in Chinese, with no indication that the skill is China-specific or that users may choose another language. Under the policy rule for natural-language violations, a fixed language/locale can be a violation when there is no opt-in or justification.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.