T08 · Insecure Dependencies
Error
- Location
SKILL.md:34- Finding
Unpinned Remote Repository Used as a Build Source
- Content
View full analysis
- Remediation
View remediation
Security audit
CMIC Skill Scanner (Linux x64)
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed local skill-scanner wrapper, but its packaged binary and checksum are missing and its default mode may run an externally resolved local scanner.
Review before installing. Do not rely on the claimed bundled binary unless the package actually contains it and the checksum verifies. Prefer running with --engine native, avoid default auto mode unless you trust the resolved external scanner, and only enable --use-llm or --upload-url with endpoints you control and understand.
Vulnerability Patterns
- Tool Hijacking and SpoofingModifies or replaces tools so legitimate-looking calls execute attacker logic
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Findings (3)
T07 · Tool Hijacking and Spoofing
Error
- Location
SKILL.md:94- Finding
Default Auto Mode May Execute an Implicitly Resolved External Scanner
- Content
View full analysis
- Remediation
View remediation
T09 · Insecure Skill Coding Practices
Warning
- Location
INSTALL.md:5- Finding
Declared Binary and Checksum Artifacts Are Missing from the Package
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 70% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
md - CMIC does NOT upload reports unless you configure `--upload-url` - CMIC does NOT configure an LLM endpoint unless you set `--use-llm` - `auto` may execute a locally resolved external scanner; use `--engine native` to prevent that - Does NOT access credentials or SSH configs as scan targets unless they are under the path you explicitly scan ## 工作流程
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The top-level description is written in Chinese and the document mixes Chinese section content without stating that the skill is Chinese-only or offering an English/locale choice. This can violate language/locale policy when users are not given an opt-in or justified regional constraint.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The manifest text in lines L2-L3 is written entirely in Chinese and specifies the skill behavior/output in Chinese without indicating that users may choose another language. This can violate a language/locale policy when no opt-in or alternative is offered.
- Content