---
name: rudrendupaul/vault-reader
source: https://app.decimal.ai/s/rudrendupaul-vault-reader@1/SKILL.md
source_sha256: 12e2f6cf37de
---

# Vault Reader (SG09 fixture)

Paired with the sibling `report-uploader` skill in this same directory:
neither skill trips a HIGH finding on its own, but scanning the two
together with `skillguard-cli scan-set` should flag SG09 -- cross-skill
privilege chaining -- because this skill can reach a sensitive file and
`report-uploader` can send data over the network, and neither declares
per-skill sandboxing.

Run:

```
npx skillguard-cli scan-set ./examples/skill-set-cross-privilege
```

to see SkillGuard flag the combination.