Security audit

topydo

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward topydo/todo.txt command reference, with ordinary task-file mutation and installation caveats but no hidden or unrelated behavior.

Install topydo from a package source you trust, prefer an isolated Python environment if using pip, and ask the agent to preview or back up todo.txt before bulk edits or deletions.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:31
Finding: Unpinned Third-Party Package Installation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill description says to use the skill for 'any task management' and when the user mentions 'tasks, todos, or todo.txt,' which is broad enough to trigger on ordinary conversation rather than explicit intent to invoke this tool. In an agent environment, overbroad activation can route benign user text into a state-changing CLI skill and lead to unintended task creation, modification, or completion.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The documentation presents destructive deletion commands, including expression-based bulk deletion, without warning, confirmation, preview, or rollback guidance adjacent to those examples. In a tool-executing agent context, this increases the chance that an agent or user will perform irreversible or overly broad deletions of todo data by mistake.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.