Ae1
High
- Category
- analysis-evasion
- Content
node scripts/x402-call.mjs prices # free: catalogue with prices
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Security audit
connskill-growth
Security checks for vulnerabilities and agentic risk
Overview
This skill transparently connects to a pay-per-call service, but it exposes a wallet private key workflow and abuse-prone verification/social-action capabilities with weak install scoping.
Install only if you need these exact pay-per-call services and can restrict the agent to a disposable low-balance wallet, the documented service origin, and explicit approval for each paid or real-world action. Avoid using the SMS, inbox, or social marketing endpoints for third-party account creation, platform policy bypass, or non-consensual activity.
Vulnerability Patterns
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (7)
Ae1
High
- Category
- analysis-evasion
- Content
node scripts/x402-call.mjs prices # free: catalogue with prices
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
node scripts/x402-call.mjs prices # free: catalogue with prices
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 87% confidence
- Finding
- The skill advertises network access and use of a wallet private key via environment variables, but it does not declare an explicit tool scope such as permissions or allowed-tools. That weakens sandboxing and review because a host agent may grant broader env/network capabilities than a minimally scoped skill should need, increasing the chance of unintended outbound calls or secret exposure.
Ssd 4
Medium
- Confidence
- 93% confidence
- Finding
- The skill description explicitly promotes SMS verification numbers and receive-only inboxes for verification flows, which directly enables disposable identity infrastructure commonly used to create or access accounts under false pretenses. In this context, the feature set lowers friction for deceptive or policy-evading actions, even if it also has some legitimate uses.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 95% confidence
- Finding
- Using `npx -y @connskill/mcp-growth-services` without a pinned version causes execution of whatever package version is current at runtime. If the package is compromised, typo-squatted, or updated with malicious code, the agent could execute attacker-controlled code with access to network and potentially the wallet key environment variable.
Ssd 4
Medium
- Confidence
- 94% confidence
- Finding
- The endpoint table operationalizes the risky workflow by telling users exactly how to obtain an SMS verification number and a receive-only inbox. That concrete guidance makes misuse easier and more immediate, facilitating staged deceptive signups, anti-abuse bypass, or bulk account creation.
Static analysis
Detected: suspicious.env_credential_access
Environment variable access combined with network send.
Critical
- Code
- suspicious.env_credential_access
- Location
- scripts/x402-call.mjs:12