pol-probe

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
3
Flagged
3
Chunks
4
Flagged Files (3)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/2] Description: --- name: pol-probe description: Define a Proof of Life (PoL) probe—a lightweight validation artifact that surfaces harsh truths before expensive development.

Tool: SKILL.md [2/2] Description: - **Build:** 2 days - **Test:** 1 day (10 user sessions) - **Analyze:** 1 day - **Disposal:** Day 5 (delete all code, keep learnings doc) ## Disposal Plan [When and how will you delete this?] Example: "After user sessions complete, archive recordings, delete Frankensoft code, document learnings in Notion." ## Owner [Who is accountable for running and disposing of this probe?] ## Status - [ ] Hypothesis defined - [ ] Probe built - [ ] Users recruited - [ ] Testin

examples/sample.mdHIGH
78.3%

Malicious tool definition detected

Tool: examples/sample.md Description: # PoL Probe Examples ### ✅ Good: Task-Focused PoL Probe **Hypothesis:** "Users can distinguish between 'archive' and 'delete' without a confirmation modal." **Probe Type:** Task-Focused Test **Method:** UsabilityHub 5-second test with 20 users **Timeline:** 2 days (build task, recruit, analyze) **Success Criteria:** - **Pass:** 80%+ users correctly identify action consequences - **Fail:** <60% correct, or 3+ users express confusion **Harsh Truth Delivered:**

template.mdHIGH
78.3%

Malicious tool definition detected

Tool: template.md Description: # PoL Probe Template Use this template to document a Proof of Life (PoL) probe.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
3
Files Flagged
3
Chunks Analyzed
4
Analyzed
Feb 21, 2026, 12:59 PM
Security Audit — runlayer — pol-probe