Security audit
Security checks for vulnerabilities and agentic risk
This Cargo demo skill is mostly coherent, but it can run paid external lead searches and silently switch data providers with too little user control.
Install only if you are comfortable using Cargo's CLI, signing into a Cargo workspace, spending demo credits on external lead or job-search providers, and reviewing any recurring play before approving it. Prefer a pinned CLI version and ask the agent to confirm the provider, limit, and expected credit cost before each paid call or fallback.
The description lists triggers such as "give me a demo" and "take me on a tour," which are generic phrases that could plausibly occur in many unrelated conversations. Although some skip conditions are provided, the trigger list still lacks enough specificity to reliably confine activation to this Cargo quickstart skill.
The skill instructs users to run npx @cargo-ai/cli without pinning a version, which allows whatever package is currently published under that name to be fetched and executed at runtime. In a security-sensitive CLI workflow, this creates a supply-chain risk: a compromised latest release or typosquatted resolution path could lead to arbitrary code execution on the user's machine.
The skill explicitly authorizes autonomous fallback behavior and paid actions based on a single broad persona prompt, including silently switching providers when failures occur. Even with an approximate credit cap, this reduces user visibility into data-source changes and can lead to unintended external queries, spending, or processing of real-world lead data without informed step-by-step consent.
- **No discovery detours.** Do not run `cargo-ai --version`, `cargo-ai whoami`, `connection connector list`, or any exploratory command first. Auth problems will surface as errors on the first real call — handle them then.
- **One command block per step**, no narration between commands.
- **Paid work is capped at ~5 credits total.** The demo uses LinkedIn-native people search (`salesNavigator.searchLeads`, 0.2/record → 25 records ≈ 5 credits). Nothing else paid runs without asking.
- **Never dead-end.** Every step has a fallback (ladder below). If a rung fails, drop one rung silently and keep moving.
## Fast path
No suspicious patterns detected.