Security audit

Linkedin Odoo

Security checks for vulnerabilities and agentic risk

Overview

The skill does what it says, but it automatically sends contact details to DuckDuckGo and writes an unverified search result into Odoo CRM records.

Install only if you are comfortable letting the skill use your Odoo credentials to update contact records and send each selected contact's name and company to DuckDuckGo. Review the found LinkedIn URL before saving it, and avoid using this unchanged in environments with strict CRM data integrity, privacy, or third-party processing requirements.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

other

Warning

Location: scripts/update_linkedin.py:69
Finding: Odoo Contact PII Disclosed to an External Search Provider
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/update_linkedin.py:14
Finding: Insufficient Validation of Search-Derived URL Before Odoo Write
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 94% confidence
Finding: The skill advertises and relies on environment-variable access and outbound network access, but it does not declare any explicit tool scope or permissions boundary. That makes the capability set implicit rather than reviewable, increasing the chance of over-privileged execution or unexpected secret/network use when the skill is invoked.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill updates res_partner.x_linkedin_url in Odoo, but the description does not prominently warn that it will modify CRM data. Users may invoke it expecting a lookup-only action, leading to unintended writes, bad profile matches, or silent data integrity issues in business records.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The script builds a search query from an Odoo contact's name and company and sends it to DuckDuckGo, which discloses personal/business contact data to a third-party service without explicit consent, notice, or approval controls. In this skill's context, that external transmission is core behavior, so the privacy risk is real and not merely theoretical, especially in regulated or confidentiality-sensitive environments.
Content: No source excerpt is available for this finding.