SkillSpector · ml-paper-writing

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

SKILL.md

Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.

templates/aaai2026/aaai2026-unified-template.tex

Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.

templates/aaai2026/aaai2026.sty

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

templates/icml2026/example_paper.tex

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

templates/colm2025/colm2025_conference.sty

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

templates/colm2025/fancyhdr.sty

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

templates/colm2025/fancyhdr.sty

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

templates/iclr2026/fancyhdr.sty

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

templates/iclr2026/fancyhdr.sty

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

templates/iclr2026/iclr2026_conference.sty

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

templates/icml2026/fancyhdr.sty

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

templates/README.md

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

templates/colm2025/fancyhdr.sty

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

templates/iclr2026/fancyhdr.sty

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

templates/icml2026/fancyhdr.sty

Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

templates/neurips2025/Makefile

Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

templates/neurips2025/Makefile