Security audit

Expanso json-to-yaml

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to be a simple JSON-to-YAML converter, but its server and cloud deployment instructions expose more risk than the local conversion task needs.

Use the local CLI pipeline when possible. If you run the MCP server, bind it to localhost or protect it with network controls, and avoid deploying from the remote URL unless you can verify the exact pipeline content or digest.

A.I.G

Vulnerability Patterns

Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions

Findings (3)

T09 · Insecure Skill Coding Practices

Warning

Location: pipeline-mcp.yaml:5
Finding: Unauthenticated HTTP Service Exposed on All Network Interfaces
Content: View full analysis
Remediation: View remediation

T03 · Remote Payload Retrieval and Execution

Warning

Location: SKILL.md:24
Finding: Deployment Command Retrieves a Mutable Remote Pipeline
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Note

Location: SKILL.md:5
Finding: External Runtime Installation Is Not Version-Pinned or Integrity-Verified
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.