alon-fact-check

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 7:28 AM UTC
• Version: 0.1.2

Overview

This is a coherent fact-checking skill that uses web research as expected, with an installation hardening note for its unpinned npx command.

Before installing, consider pinning or otherwise verifying the installer package/source instead of running a floating npx command. Once installed, the skill mainly guides the agent to search the web and cite sources for fact-checking; review links and claims as you would with any research workflow.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: README.md:9

Finding

Unpinned Third-Party Package Execution Through npx

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• System Prompt Leakage: Direct Leakage, Indirect Extraction, Tool-Based Exfiltration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Direct Prompt Extraction

High

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.

Content

Scanner excerpt · SKILL.md (reported line 283)May include surrounding context.

md

- Before sending, compare the final report against the checked claim list. If any duplicate section, missing claim text, repeated verdict line, source mismatch, or malformed source line appears, rewrite the final report cleanly from the checked claim list.
- Prefer a shorter clean report over a longer report that risks duplicated sections or copied paragraphs.

## CRITICAL Output Rules

- **NEVER repeat any content**. Each section appears exactly ONCE. No duplicated tables, sources, or paragraphs.
- **Final self-check before sending**: verify claim numbering is sequential, no section is duplicated, every source belongs to the claim it is listed under, and there are no dangling or malformed source lines.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 95% confidence

Finding

The README instructs users to run npx skills add ... without pinning a specific package version, which can fetch and execute whatever version of the CLI is current at install time. That creates a supply-chain risk: if the package is later compromised, typosquatted, or publishes a breaking/malicious release, users following the install command may execute unreviewed code on their machine.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 70% confidence

Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.