Security audit

academic-writing-refiner

Security checks for vulnerabilities and agentic risk

Overview

This skill provides academic writing guidance for CS papers, with a broad but disclosed trigger and no risky execution or data-handling behavior.

Install this if you want focused help polishing academic CS manuscripts, rebuttals, or LaTeX prose. Be aware it may activate for a wide range of academic writing requests, so confirm the requested editing style when the context is broad or casual.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 95% confidence
Finding: The trigger description is very broad and includes generic phrases like improve, polish, edit, or proofread academic or research writing, plus venue-name mentions and LaTeX handling. This can cause the skill to activate for loosely related requests, leading to misrouting, over-collection of user content, or inappropriate application of specialized instructions where a general writing skill would be safer.

Static analysis

No suspicious patterns detected.