# SkillSpector Security Report



**Skill:** document\-summary  

**Source:** `H:\repos\web-timosam\output\security-skill-tests-2026-10-29\skill-fixtures\injection`  

**Scanned:** 2026-10-29 15:34:07 UTC  



## Risk Assessment



| Metric | Value |

|--------|-------|

| Score | 20/100 |

| Severity | LOW |

| Recommendation | SAFE |



## Components (1)



| File | Type | Lines | Executable |

|------|------|-------|------------|

| `SKILL.md` | markdown | 6 | No |



## Issues (1)



### 🔴 HIGH: P1



**Location:** `SKILL.md:6`  

**Confidence:** 80%  



**Message:** Instruction Override



**Remediation:** Remove or rewrite any text that instructs the agent to ignore prompts, override safety rules, or trust unverified content\. Ensure skill content cannot be injected to alter agent behavior\.



---



## Inspection Completeness



| Metric | Value |

|--------|-------|

| Execution | successful |

| Status | complete |

| Coverage | 100\.0% |

| Fully inspected | 1 |

| Partially inspected | 0 |

| Entirely uninspected | 0 |



### Analyzer Statuses



| Reason / Status | Location | Details |

|-----------------|----------|---------|

| completed | `artifact_integrity` |  |

| no\_applicable\_files | `behavioral_ast` | No files matched this analyzer's applicability contract\. |

| no\_applicable\_files | `behavioral_taint_tracking` | No files matched this analyzer's applicability contract\. |

| no\_applicable\_files | `bundled_execution_surface` | No files matched this analyzer's applicability contract\. |

| no\_applicable\_files | `mcp_least_privilege` | No files matched this analyzer's applicability contract\. |

| completed | `mcp_rug_pull` |  |

| completed | `mcp_tool_poisoning` |  |

| disabled\_by\_configuration | `meta_analyzer` | Analyzer was disabled by the requested configuration\. |

| disabled\_by\_configuration | `semantic_developer_intent` | Analyzer was disabled by the requested configuration\. |

| disabled\_by\_configuration | `semantic_quality_policy` | Analyzer was disabled by the requested configuration\. |

| disabled\_by\_configuration | `semantic_security_discovery` | Analyzer was disabled by the requested configuration\. |

| completed | `static_patterns_agent_snooping` |  |

| completed | `static_patterns_anti_refusal` |  |

| completed | `static_patterns_data_exfiltration` |  |

| completed | `static_patterns_deserialization` |  |

| completed | `static_patterns_excessive_agency` |  |

| completed | `static_patterns_harmful_content` |  |

| completed | `static_patterns_memory_poisoning` |  |

| completed | `static_patterns_output_handling` |  |

| completed | `static_patterns_privilege_escalation` |  |

| completed | `static_patterns_prompt_injection` |  |

| completed | `static_patterns_rogue_agent` |  |

| completed | `static_patterns_ssrf` |  |

| completed | `static_patterns_supply_chain` |  |

| completed | `static_patterns_system_prompt_leakage` |  |

| completed | `static_patterns_tool_misuse` |  |

| completed | `static_yara` |  |



## Metadata



- **Executable Scripts:** No



*Generated by SkillSpector v2.12.0*

