Security audit

Pentest Auth Bypass

Security checks for vulnerabilities and agentic risk

Overview

This skill is framed as live authentication security testing, but the bundled script mainly emits a fixed high-severity finding and placeholder artifacts without performing the claimed tests.

Review this skill carefully before installing. It does not appear to perform the advertised authentication testing, and its generated findings should not be treated as verified vulnerabilities. Avoid providing secrets, cookies, tokens, or real session data as input unless the artifact-writing behavior is changed or redacted.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/auth_bypass.py:27
Finding: Unconditional Generation of Fabricated High-Severity Security Findings
Content: View full analysis
dict: return {'finding_id':f"{SKILL_NAME.replace('-', '_')}-001",'skill':SKILL_NAME,'timestamp':datetime.now(timezone.utc).isoformat(),'target':target,'title':'Pentest Auth Bypass identified a security weakness','cve':'N/A','cwe':'CWE-693','cvss_score':8.0,'cvss_vector':'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L','owasp_category':'A05:2021 - Security Misconfiguration','mitre_attack':'T1110, T1550','severity':'High','description':'Automated and manual testing identified a security condition requiring remediation.','proof_of_concept':'python scripts/auth_bypass.py --dry-run','screenshot':'assets/findings/placeholder.png','remediation':'Apply least privilege, secure defaults, and verify fixes with retest.','references':["https://github.com/vanhauser-thc/thc-hydra", "https://portswigger.net/burp"],'status':'open'} ``` ```python payload=load_payload(args.input); finding=build_finding(args.target); arts=[] if not args.dry_run: for rel in GENERATED_OUTPUTS: ap=resolve_artifact_path(report_path.parent,rel) write_placeholder_artifact(ap,{'skill':SKILL_NAME,'target':args.target,'generated_at':datetime.now(timezone.utc).isoformat(),'input_payload':payload,'findings':[finding]}) arts.append(str(ap)) r={'status':'ok','summary':'Dry run completed' if args.dry_run else 'Skill executed','artifacts':arts+[str(report_path)],'details':{'skill':SKILL_NAME,'target':args.target,'scope':scope_meta,'findings':[finding],'expected_outputs':GENERATED_OUTPUTS,'dry_run':args.dry_run}} ``` ### Technical Analysis The Skill declares that it validates brute-force resistance, session integrity, and MFA enforcement. However, the implementation performs no authentication requests, se ...[truncated 2769 chars]
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: The declared description suggests an active security testing skill for authentication and session management weaknesses. However, this code chunk only checks scope and an authorization confirmation flag, loads a payload, constructs a static finding, and writes placeholder output files. There is no network interaction with the target, no login/session handling logic, no token/cookie manipulation, no brute-force attempts, and no account takeover simulation. Its primary behavior is report scaffolding, not auth testing, so the description materially overstates what the code actually does.
Content: No source excerpt is available for this finding.