Back to skill

Security audit

BioFlow

Security checks for vulnerabilities and agentic risk

Overview

This is a BioFlow API quickstart guide with disclosed, purpose-aligned instructions and no executable code or hidden persistence.

Install this only if you want an agent to help with BioFlow API usage. Because the examples cover login tokens, dataset upload, balance checks, and task submission, review any real host, credentials, files, and chargeable job requests before letting the agent execute them.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

The skill description is broad enough to match many generic API-assistance requests, which can cause the agent to invoke this skill outside its intended BioFlow-specific context. That increases the chance of irrelevant guidance, accidental disclosure of project-specific workflow details, or incorrect tool selection that influences downstream actions.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file contains user-facing instructions in multiple languages, with key workflow steps such as registration and login headings written in Chinese while other content remains in English. That can violate a language/locale policy when users are not given an explicit language option or told that the document is intended for a specific locale.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.