T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:21- Finding
Unpinned npm Package Is Downloaded and Executed Automatically
- Content
View full analysis
- Remediation
View remediation
Security audit
Tmp.JO43v0Z5UV
Security checks for vulnerabilities and agentic risk
Overview
This skill is for Etix event lookup, but it asks users to run unpinned external code and route requests through a browser extension using their Etix browser session.
Review before installing. Use only if you are comfortable with an unofficial MCP and browser extension acting through your Etix browser session. Prefer pinning exact package and repository versions, building in a disposable environment, and using a dedicated browser profile with no unrelated signed-in accounts.
Vulnerability Patterns
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)
T05 · Unauthorized Access and Privilege Escalation
Error
- Location
SKILL.md:32- Finding
Unpinned Browser Extension Build Receives Etix Session Context
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)
MCP Config Access
High
- Category
- Agent Snooping
- Confidence
- 95% confidence
- Finding
Skill accesses MCP server configuration files (mcp.json). MCP configs contain server URLs, authentication tokens, and tool definitions — reading them allows the skill to discover and potentially abuse other tool integrations.
- Content
1. Install etix-mcp
.mcp.json(project) or~/.claude/mcp.json(global):json {
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The manifest lists several specific trigger phrases, but then expands activation to "any request involving Etix events, venues, performers, or showtimes," which is ambiguous and broad enough to overlap with ordinary conversation about entertainment. This lacks clear boundaries for when the skill should or should not activate.
- Content