T06 · System Persistence
Error
- Location
SKILL.md:23- Finding
Persistent Background Execution Through Cron or Heartbeat Scheduling
- Content
View full analysis
- Remediation
View remediation
Security audit
Julia Bounty Scout
Security checks for vulnerabilities and agentic risk
Overview
This skill is a Review item because it encourages unattended background bounty hunting that may submit proposals or PRs and track payments without clear user approval or limits.
Install only if you are comfortable with an agent potentially running repeatedly and interacting with GitHub or bounty platforms on your behalf. Before use, require explicit approval for submissions and PRs, use narrowly scoped tokens, keep financial or wallet access read-only where possible, and avoid cron or heartbeat operation unless you have a documented way to monitor and disable it.
Vulnerability Patterns
- System PersistenceInstalls backdoors, hooks, services, or scheduled tasks that survive the run
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The skill explicitly tells users to run it continuously in the background while earlier claims state it can autonomously scan platforms, generate proposals/PRs, and track payments. That creates a meaningful risk of unattended external actions, spammy submissions, unintended account activity, or financial/reputational harm without clear disclosure, approval gates, or operational safeguards.
- Content