Security audit

davinci-mode

Security checks for vulnerabilities and agentic risk

Overview

This is a small instruction-only skill for comparing design options, with one install-time supply-chain caution from an unpinned npx command.

Before installing, prefer a pinned or manually inspected installation path instead of blindly running the unpinned npx command. Once installed, the skill is only guidance for decision framing and does not ask for credentials, background access, or authority to make changes on its own.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: README.md:12
Finding: Unpinned Third-Party Package Execution During Installation
Content: View full analysis
Remediation: View remediation
add AntreasAntoniou/davinci-mode ``` 2. Where the tooling supports it, pin the skill source to an immutable commit or verified release rather than a mutable repository default branch. 3. Document the expected npm package name, publisher, version, and checksum or provenance information so users can verify what will execute. 4. Prefer an installation workflow that downloads and inspects the package before execution, or make the documented manual installation method the primary recommendation. 5. Use npm provenance, signed releases, lockfiles, and integrity verification where applicable. 6. Re-review and intentionally update pinned versions rather than automatically executing the latest available release. ]]>

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Rp1

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.