Security audit

Tmp.BcPQA7YzJI

Security checks for vulnerabilities and agentic risk

Overview

This skill is purpose-aligned for OurFamilyWizard automation, but it asks users to run unpinned external code with reusable OFW credentials and broad read/write access to sensitive legal-family records.

Review before installing. Use this only if you are comfortable giving an external MCP server broad OFW read/write access. Prefer a pinned, reviewed package version, avoid putting your OFW password in project files or shell history, keep secret files out of version control with restrictive permissions, and require explicit confirmation before sending messages, deleting records, or reading messages that may mark them read.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Error

Location: SKILL.md:18
Finding: Unpinned External Package Retrieval and Execution
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:18
Finding: Plaintext OFW Credentials in Persistent Configuration and Command Arguments
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Rogue AgentSelf-Modification, Session Persistence
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (4)

MCP Config Access

High

Category: Agent Snooping
Confidence: 95% confidence
Finding: The skill instructs users to place OFW credentials into MCP configuration under ~/.claude/mcp.json, which creates a clear secret-handling risk. Storing highly sensitive co-parenting account credentials in plaintext config increases the chance of accidental disclosure through local file access, backups, logs, screenshots, or other tools that can read agent configuration.
Content: Scanner excerpt · SKILL.md (reported line 18)May include surrounding context.
Option A — Claude Code (direct MCP, no mcporter)

Add to .mcp.json in your project or ~/.claude/mcp.json:

json
{

Credential Access

High

Category: Privilege Escalation
Confidence: 95% confidence
Finding: The instructions explicitly direct users to store OFW_USERNAME and OFW_PASSWORD in a local .env file, again encouraging plaintext credential storage. Because this skill accesses legally sensitive family communications, calendar, expenses, and journal data, compromise of those credentials could expose deeply private records and enable unauthorized read/write actions.
Content: Scanner excerpt · SKILL.md (reported line 53)May include surrounding context.
2. Configure credentials

bash
cp .env.example .env # Edit .env: set OFW_USERNAME and OFW_PASSWORD

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The manifest says the skill triggers on specific phrases "or any request involving co-parenting messages, calendar events, shared expenses, or journal entries," which greatly broadens activation beyond the listed phrases. This can overlap with ordinary discussion about co-parenting and does not clearly define when the skill should not activate.
Content: No source excerpt is available for this finding.

Session Persistence