SkillSpector · kodiak-strategy

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/kodiak_config.py

Without declared permissions the skill's intent is opaque and cannot be validated.

SKILL.md

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

SKILL.md

Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.

scripts/kodiak-scanner.py

Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.

scripts/kodiak_config.py