Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
Without declared permissions the skill's intent is opaque and cannot be validated.
- Content
Security audit
threads-research
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed Threads research helper that sends public lookup requests to Crawlora and does not show hidden persistence, privilege escalation, destructive behavior, or unrelated data access.
Install only if you are comfortable sending Threads usernames, post identifiers, cursors, topic IDs, and search queries to Crawlora using your CRAWLORA_API_KEY. Do not use it for sensitive searches unless you intend that data to be handled by the external provider, and keep the API key in the environment rather than hardcoding or committing it.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (7)
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 93% confidence
- Finding
The skill is explicitly designed to send user-supplied inputs such as usernames, post identifiers, and search queries to a third-party service at api.crawlora.net. In a research skill this is expected, but it still creates a real data-exposure boundary: sensitive or private user-entered queries could be disclosed to an external provider, and the API key introduces an additional secret-handling requirement.
- Content
md Endpoints this skill uses, grouped by platform. Call them via `scripts/crawlora.sh` (see SKILL.md). All paths are relative to the API base `https://api.crawlora.net/api/v1` and require the header `x-api-key: $CRAWLORA_API_KEY`. Path params like `{id}` are substituted into the URL; `GET` params go in the query string; `POST` params go in a JSON body. **10 endpoints across 1 platform group(s).**
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 60% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md #!/usr/bin/env bash # Crawlora REST helper — minimal, dependency-free (curl only). # Calls https://api.crawlora.net/api/v1 with your Crawlora API key. # Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills. # # Usage:
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 60% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
sh #!/usr/bin/env bash # Crawlora REST helper — minimal, dependency-free (curl only). # Calls https://api.crawlora.net/api/v1 with your Crawlora API key. # Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills. # # Usage:
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 60% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
sh #!/usr/bin/env bash # Crawlora REST helper — minimal, dependency-free (curl only). # Calls https://api.crawlora.net/api/v1 with your Crawlora API key. # Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills. # # Usage:
Sudo/Root Execution
Medium
- Category
- Privilege Escalation
- Confidence
- 80% confidence
- Finding
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
- Content
sh # config supplies the header and is removed automatically on exit. umask 077 curl_config="$(mktemp "${TMPDIR:-/tmp}/crawlora-curl.XXXXXX")" chmod 600 "$curl_config" trap 'rm -f "$curl_config"' EXIT printf 'header = "x-api-key: %s"\n' "$CRAWLORA_API_KEY" >"$curl_config" auth=(--config "$curl_config")
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 81% confidence
- Finding
This markdown file documents use of an external API endpoint and required authentication header, which implies network transmission and use of credentials. While the reference is descriptive, it does not include any warning about sending queries to a third-party service or handling the API key with care.
- Content