Security audit
Security checks for vulnerabilities and agentic risk
This GitCode API skill is a documentation-only integration, but it mixes read-only querying with write, admin, and unsafe token-handling guidance without enough safeguards.
Install only if you intend to use this as a broad GitCode API reference. Use a narrowly scoped read-only token by default, do not paste tokens into chat, do not put tokens in URLs, and require explicit confirmation before any POST, PUT, PATCH, DELETE, membership, webhook, settings, transfer, or deletion operation.
examples.md:245Authenticated request helper can disclose the GitCode token to an arbitrary destination
SKILL.md:18Token handling guidance encourages exposure through conversation text and URL query parameters
SKILL.md:3Write, administrative, and destructive capabilities exceed the Skill's query-oriented declaration
The collaborator-management example demonstrates a permission-changing operation that exceeds a read/query framing and can materially alter repository access. If used with a powerful token, it could grant access to unintended users or elevate privileges, making the capability significantly riskier than simple data retrieval.
The natural-language sections such as '何时使用' and the request/authentication guidance are written in Chinese only, which can force a specific language on users without opt-in. This matches the policy category for language or locale constraints because the file does not offer an alternative language or indicate that Chinese is optional.
The examples instruct use of an authentication token in outbound API requests but provide no warning about token sensitivity, storage, logging, or transmission risks. This can normalize unsafe handling of credentials and increase the likelihood that users paste high-privilege tokens into untrusted environments or expose them in logs.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
owner = "OWNER"
repo = "REPO"
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}"
response = requests.get(url, headers={'PRIVATE-TOKEN': token})
if response.status_code == 200:
The examples include state-changing operations such as creating issues and pull requests even though the skill is described primarily as 'fetch and query data'. This mismatch can mislead users or downstream agents into granting broader trust or permissions than expected, increasing the chance of unintended writes to external repositories.
The markdown includes examples for creating issues, pull requests, and later adding collaborators without explicit warnings that these operations modify remote state. Users may treat examples as harmless reads and accidentally trigger repository changes, approvals, or access modifications.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"assignee": "username"
}
response = requests.post(
url,
headers={'PRIVATE-TOKEN': token, 'Content-Type': 'application/json'},
json=data
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"assignee": "username"
}
response = requests.post(
url,
headers={'PRIVATE-TOKEN': token, 'Content-Type': 'application/json'},
json=data
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
url = f"https://api.gitcode.com/api/v5/repos/{owner}/{repo}/collaborators/{username}"
data = {"role_id": role_id}
response = requests.put(
url,
headers={'PRIVATE-TOKEN': token, 'Content-Type': 'application/json'},
json=data
No suspicious patterns detected.