Security audit

Remote Api

Security checks for vulnerabilities and agentic risk

Overview

The skill does what it says, but it includes unsafe install commands and can expose local services to the public internet without enough upfront guardrails.

Install only if you are comfortable reviewing and constraining the setup. Prefer a pinned package-manager install in an isolated environment, avoid the curl-to-bash or irm-to-iex installers, expose only APIs meant for external testing, do not tunnel SSH, databases, admin panels, or secret-bearing debug endpoints, and stop the tunnel when testing is done.

A.I.G

Vulnerability Patterns

Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T03 · Remote Payload Retrieval and Execution

Error

Location: SKILL.md:47
Finding: Unverified Remote Installation Scripts Are Executed Directly
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: SKILL.md:13
Finding: AiTun Dependency Is Installed Without Version or Integrity Pinning
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (6)

External Script Fetching

High

Category: Supply Chain
Confidence: 97% confidence
Finding: The skill recommends curl -fsSL https://aitun.cc/install.sh | bash, which executes a remote script directly from the network without inspection, signature verification, or integrity pinning. If the remote server, transport, or distribution pipeline is compromised, arbitrary code runs on the host immediately.
Content: Scanner excerpt · SKILL.md (reported line 52)May include surrounding context.
Or install via one-line script (Linux/macOS):

bash
curl -fsSL https://aitun.cc/install.sh | bash

Windows (PowerShell):

Chaining Abuse

High

Category: Tool Misuse
Confidence: 98% confidence
Finding: The | bash construct chains network retrieval directly into command execution, eliminating any opportunity for review and making compromise of the remote content immediately exploitable. In an agent skill context, this is especially risky because automation may execute the command non-interactively with user privileges.
Content: Scanner excerpt · SKILL.md (reported line 52)May include surrounding context.
Or install via one-line script (Linux/macOS):

bash
curl -fsSL https://aitun.cc/install.sh | bash

Windows (PowerShell):

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The core workflow instructs the user to publish a local API to the public internet, but it does not present an upfront warning that this may expose private data, unauthenticated endpoints, debug routes, or internal-only services. In security terms, this is dangerous because the default action increases exposure before the user is prompted to consider authentication, authorization, rate limiting, and data sensitivity.
Content: No source excerpt is available for this finding.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 118)May include surrounding context.

POST https://aitun.cc/abc123/api/users

Test with curl: curl https://aitun.cc/abc123/health

This tunnel expires in 24 hours.

text

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill is positioned as exposing local HTTP APIs, but the CLI reference also documents generic TCP port forwarding for ports such as 22 or 3306. That materially expands the attack surface from web testing to exposing sensitive internal services to the public internet, and the skill does not prominently constrain or warn against risky uses.
Content: No source excerpt is available for this finding.

External Script Fetching

Low

Category: Supply Chain
Confidence: 15% confidence
Finding: Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
Content: Scanner excerpt · SKILL.md (reported line 118)May include surrounding context.

POST https://aitun.cc/abc123/api/users

Test with curl: curl https://aitun.cc/abc123/health

This tunnel expires in 24 hours.

text