Security audit

Camsnap 1.0.0

Security checks for vulnerabilities and agentic risk

Overview

This camera-capture skill is coherent, but it relies on an unpinned third-party executable and gives weak guidance around camera passwords and retained media.

Review this before installing. Use a dedicated low-privilege camera account, avoid putting real camera passwords in reusable command history or shared transcripts, protect any camsnap config file with restrictive permissions, and save snapshots or clips only to controlled locations. The Homebrew dependency comes from a third-party tap and is not pinned by this skill, so installation trust depends on that upstream package source.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:5
Finding: Unpinned Executable Installed from a Third-Party Homebrew Tap
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:13
Finding: Camera Password Passed in Plaintext Command-Line Arguments
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill instructs users to add cameras with --user and --pass and notes a persistent config file path, but it does not warn that camera credentials will be stored and reused from disk. This can expose sensitive surveillance access if the config file is left with weak permissions, synced, backed up insecurely, or inspected by other local users or tools.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The examples for snap and clip write image and video files to user-specified paths, but the skill does not warn that captured media is persisted to disk. This can lead to unintended retention of sensitive camera footage, especially on shared machines, synced folders, or automated agent workflows that may later expose those files.
Content: No source excerpt is available for this finding.