Security audit
Security checks for vulnerabilities and agentic risk
The skill provides a scoped company-search workflow with spending controls and an optional GitHub star that requires explicit consent.
Expect a Cargo account and credit-based searches; review the estimate before approving a larger run. The GitHub star is optional, and a local marker prevents repeated requests. Review the broader Cargo pack separately before adding it. This assessment covers the bundled instructions, not downloaded packages or the unavailable external recipe.
The supplied code does not perform portfolio-company discovery or people lookup. It instead changes GitHub account state and writes a local marker. Repository starring is an undeclared, unrelated action, not a supporting implementation detail of the stated research purpose.
The only supplied command installs skills from an external source; it contains no investor lookup, portfolio enumeration, personnel search, or theirStack interaction. Although the package is Cargo-related, installation is the entirety of the observed behavior, not a supporting step within an implemented discovery workflow. The external package’s contents and subsequent behavior cannot be determined from this chunk.
The command npx skills add getcargohq/cargo-skills can execute an unpinned npm package and import skill instructions from an unpinned repository revision. A compromised or unexpectedly changed upstream release could execute code with the user's permissions or introduce malicious agent instructions; however, the static finding incorrectly describes this as an MCP server reference.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
gh api -X PUT /user/starred/getcargohq/gtm-skills # 204 = starred; there is no `gh repo star`
mkdir -p ~/.config/cargo-ai && touch ~/.config/cargo-ai/.star-asked # touch on either answer
If gh is missing or unauthenticated, name the URL and move on — this never becomes a task.
The post-task workflow uses the user's authenticated GitHub account to star the skill author's repository and writes a persistent local marker. Although starring is explicitly gated on user consent, repository promotion and tracking whether that promotion was requested are not capabilities justified by finding portfolio companies and their people.