T09 · Insecure Skill Coding Practices
Error
- Location
main.py:27- Finding
Unvalidated Input Permits Injection of Additional Nmap Arguments
- Content
View full analysis
- Remediation
View remediation
Security audit
Network Scan
Security checks for vulnerabilities and agentic risk
Overview
This network-scanning skill is coherent, but needs review because it can probe broad networks and weak input checks can let requests change Nmap behavior beyond the documented options.
Install only if you intend to run authorized network scans. Use it in a controlled environment, avoid broad CIDR or aggressive scans unless approved, and treat the input-validation gaps as something to fix before exposing the skill to untrusted users or automated agents.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)
YARA rule 'offensive_tool_references': References to well-known offensive security tools [hacktools]
High
- Category
- YARA Match
- Confidence
- 70% confidence
- Finding
YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).
- Content
ats, including CIDR notation, IP ranges, and comma-separated lists. Defaults to quick scan for CIDR.
Inputs
target: The target network or IP address to scan (e.g., 192.168.1.0/24, 192.168.1.1-192.168.1.10, 192.168.1.1,192.168.1.2).ports: The ports to scan (e.g., 80,443).--quick: (Optional) Scan only the top 10 ports.--fast: (Optional) Use aggressive scan settings (nmap -T4).--timeout: (Optional) Set a timeout in seconds for the scan (default: 30).--top-ports: (Optional) Scan the top N most common ports (e.g., --top-ports 100).--hosts-limit: (Optional) Limit the number of hosts to scan (e.g., --hosts-limit 50).--exclude: (Optional) Exclude a specific IP address from the scan (e.g., --exclude 192.168.1.5).
Outputs
JSON object containing the nmap scan results. Includes scan results, nmap command used, and scan information.
Usage
To use this skill, call it with the
targetandportsparameters:text network-scan targ
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill enables active network scanning but does not warn users that port scanning can disrupt services, trigger IDS/IPS alerts, or violate organizational policy or law if run without authorization. In this context, the omission increases misuse risk because the skill is explicitly designed to scan networks and even supports broader target formats such as CIDR ranges.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
This skill performs active network scanning against user-supplied targets and port ranges without any warning, confirmation, or authorization check before initiating outbound probes. In an agent or automation context, that can enable unintended reconnaissance of internal or external networks, creating policy, legal, and detection risks even if the code's apparent purpose is administrative.
- Content
Static analysis
No suspicious patterns detected.