Security audit

Seedgen

Security checks for vulnerabilities and agentic risk

Overview

This is a simple random-value generator, but it overclaims deterministic and audit-ready behavior that the implementation does not provide.

Review before installing if you need reproducible, auditable, or security-sensitive random values. Treat it as a basic random generator only; avoid relying on its int or float outputs for cryptographic purposes, and apply external limits if exposing it to automated input.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/script.sh:87
Finding: Predictable and Biased Random Number Generation
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Note

Location: scripts/script.sh:150
Finding: Unbounded Output and Batch Sizes Permit Resource Exhaustion
Content: View full analysis
/dev/null | head -c "$length" || true) echo "$result" } cmd_hex() { local bytes="${1:-}" require_arg "$bytes" "bytes" [[ "$bytes" =~ ^[0-9]+$ ]] || die "Bytes must be a positive integer" [[ "$bytes" -gt 0 ]] || die "Bytes must be greater than 0" local result result=$(head -c "$bytes" /dev/urandom | od -An -tx1 | tr -d ' \n') echo "$result" } cmd_bytes() { local count="${1:-}" require_arg "$count" "count" [[ "$count" =~ ^[0-9]+$ ]] || die "Count must be a positive integer" [[ "$count" -gt 0 ]] || die "Count must be greater than 0" local result result=$(head -c "$count" /dev/urandom | base64 | tr -d '\n') echo "$result" } ``` ```bash cmd_password() { local length="${1:-16}" [[ "$length" =~ ^[0-9]+$ ]] || die "Length must be a positive integer" [[ "$length" -ge 4 ]] || die "Password length must be at least 4" local charset='A-Za-z0-9!@#%_+=' local result result=$(tr -dc "$charset" < /dev/urandom 2>/dev/null | head -c "$length" || true) echo "$result" } cmd_batch() { local type="${1:-}" local count="${2:-}" require_arg "$type" "type (string|hex|bytes|int|float|uuid|password)" require_arg "$count" "count" [[ "$count" =~ ^[0-9]+$ ]] || die "Count must be a positive integer" [[ "$count" -gt 0 ]] || die "Count must be > 0" shift 2 local i for (( i = 1; i <= count; i++ )); do case "$type" in string) cmd_string "${1:-16}" ;; hex) cmd_hex "${1:-16}" ;; bytes) cmd_bytes "${1:-16}" ;; int) ...[truncated 2155 chars]
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: The skill’s metadata and description claim reproducible seeds, deterministic test data, salt rotation, randomness auditing, and seed record storage, but the documented behavior instead produces ordinary non-deterministic random outputs and does not provide several advertised capabilities. This mismatch can mislead users into using the tool for security-sensitive or compliance-sensitive workflows under false assumptions, resulting in irreproducible tests, improper audit evidence, or unsafe operational handling of salts and seeds.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

High

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The skill advertises reproducible seeds and deterministic test data, but every implemented generator uses fresh entropy or process-local pseudo-randomness and provides no way to supply, persist, or replay a seed. This can mislead users into relying on outputs for audits, test reproducibility, salt rotation records, or incident reconstruction when the values cannot be regenerated, causing integrity and operational failures in security-sensitive workflows.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.