Security audit
Security checks for vulnerabilities and agentic risk
The skill provides a coherent Cargo funding lookup with cost controls and an optional GitHub star request that requires explicit consent.
Funding lookups send selected company domains to Cargo and spend credits; share only authorized account lists and review the full-batch estimate. Consider reviewed package versions, and assess the optional broader pack separately because its implementation was not verified here. GitHub starring is optional and requires your explicit agreement.
The supplied commands do not retrieve or track company funding. Instead, they perform an undeclared GitHub account modification and create a related local marker. These actions are unrelated to the declared funding-tracking purpose and are not supporting implementation details for it.
Although the repository is associated with Cargo, the supplied code only invokes a skill installer. Installation could support a larger implementation, but no such implementation is shown; the chunk's actual behavior is skill installation rather than funding tracking. No malicious behavior is established by this command alone.
The workflow instructs the agent to submit company-domain records to Cargo for enrichment, including potentially domains drawn from the user's account list. Although Cargo is named as the provider, the skill does not warn that these records leave the user's environment and are disclosed to an external service.
The command invokes an unpinned npm executable through npx, potentially downloading and executing whatever version resolves at execution time. A compromised upstream release could execute code with the user's privileges; however, this is an optional installation recommendation, not an MCP server reference as the detector claims.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
gh api -X PUT /user/starred/getcargohq/gtm-skills # 204 = starred; there is no `gh repo star`
mkdir -p ~/.config/cargo-ai && touch ~/.config/cargo-ai/.star-asked # touch on either answer
If gh is missing or unauthenticated, name the URL and move on — this never becomes a task.
The stated purpose is retrieving company funding information through Cargo, but this section instructs the agent to star the publisher's repository using the user's GitHub account and create a persistent local marker. Explicit consent mitigates unauthorized action, but repository promotion and its tracking state are not necessary for funding research or declared in the manifest's scope.