Security audit

Driver Receipt Generator

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed receipt-generation skill that sends user-provided ride details to ReceAI, with privacy caveats but no hidden code, persistence, or unrelated authority.

Before installing, understand that receipts, passenger emails, route details, amounts, and payment methods may be entered into ReceAI to create or send receipts. Avoid optional personal details when they are not needed, get passenger consent before emailing receipts, and review ReceAI’s privacy and retention terms if you plan to use account history or branded receipt features.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The README encourages users to email receipts and share ride details through an external service, which may include passenger names, email addresses, trip routes, dates, and payment information, but it provides no privacy notice or data-handling warning. That omission can lead users to transmit personal or quasi-sensitive data without understanding where it is sent, retained, or exposed, increasing privacy and compliance risk.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The skill directs users to generate shareable links and email receipts through ReceAI, which implies transmitting passenger email addresses, names, trip details, and payment-related metadata to a third-party service. Because the skill does not clearly warn users at the point of use that this data leaves the agent and is processed externally, users may disclose sensitive travel and contact information without informed consent.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The workflow tells users to collect and enter passenger names, locations, dates, amounts, and payment methods into ReceAI without an explicit disclosure that this information is being shared with an external website. This is sensitive trip and contact data, and in some cases can reveal personal movement patterns or financial activity, making undisclosed third-party transmission a real privacy risk.

Static analysis

No suspicious patterns detected.