Security audit

Kafka

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Kafka command-line helper, but users should treat it as an administrative tool that can read topic data and change cluster state.

Install only if you want an agent to help operate Kafka through local Kafka CLI tools. Use least-privilege Kafka credentials, avoid consuming production topics unless authorized, and be careful with administrative commands, especially increasing partitions because it cannot be rolled back by the script.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 90% confidence
Finding: The code is broadly related to Kafka management, publishing, consuming, and lag monitoring, so the general domain matches. However, the declared description specifically mentions produce/consume/manage Kafka topics with lag monitoring and data export. The script does more than that in several material ways: it performs administrative actions such as deleting topics and increasing partitions, inspects cluster health and broker API details, checks under-replicated partitions, enumerates groups/topics, and stores logs under the user's home directory. Those are meaningful additional capabilities not reflected in the description. Conversely, the declared 'data export' capability is not clearly implemented; the script can consume and print messages or show offsets, but there is no explicit export mechanism to files or external destinations. Therefore this is a description/behavior mismatch, though partial overlap exists.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The skill advertises message consumption and data-handling capabilities without warning that consuming Kafka topics can reveal sensitive business data, credentials, PII, or internal event streams. In an agent setting, this increases the chance of over-broad use against production clusters, leading to unintended data exposure even if the feature is nominally legitimate.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The partitions command warns that increasing partitions is irreversible, but it immediately performs the change without any interactive confirmation or safety flag. In a Kafka admin helper, this can lead to accidental topology changes that cannot be rolled back and may affect partitioning behavior, consumer ordering assumptions, and operational stability.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.