Security audit

Postiz Extended

Security checks across malware telemetry and agentic risk

Overview

This appears to be a real Postiz social-posting helper, but it needs review because it can publish/delete posts and stores a reusable login cookie in a predictable temporary file.

Install only if you are comfortable giving the skill access to your Postiz account and connected social channels. Prefer draft or scheduled posts for first runs, manually confirm platform, content, timing, and post IDs before using `--now` or DELETE examples, and remove or protect `/tmp/postiz-cookies.txt` after use, especially on shared machines.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 94% confidence
Finding: The skill clearly instructs the agent to use environment variables, shell commands, network calls, and temporary cookie files, yet it declares no permissions. This creates a capability/permission mismatch that can lead to over-broad execution in environments where users or orchestrators rely on declared permissions to assess risk before enabling a skill.

Vague Triggers

Medium

Confidence: 84% confidence
Finding: The 'USE WHEN' text is broad enough to trigger on many generic social-media or content-automation requests, increasing the chance the skill is invoked in situations where the user did not intend live posting actions. Because this skill can schedule, publish, update, and delete real posts, overly broad activation raises the risk of unintended account-impacting operations.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The documentation includes immediate publishing ('now') and deletion operations against live social accounts without prominent warnings or confirmation requirements. In context, this is more dangerous because the skill directly targets external platforms and account state, so accidental or overly eager execution can cause irreversible public posts or loss of scheduled content.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The script persists authenticated session cookies to a predictable path in /tmp, which is a shared, world-accessible namespace on many systems. Without restrictive file permissions, per-user isolation, or any warning to the operator, another local user or process may read or reuse the session token and act as the authenticated Postiz user.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The script persists authenticated session cookies to a fixed path in /tmp, which is a shared, world-accessible location on many systems. This can expose reusable authentication material to other local users or processes via file theft, symlink attacks, or permissive default file modes, enabling unauthorized access to the Postiz account.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.