Security audit

Bim Qto

Security checks for vulnerabilities and agentic risk

Overview

This skill performs BIM quantity takeoff and report export in a way that matches its stated purpose, with minor export-related cautions rather than evidence of malicious behavior.

Install only if you are comfortable giving the skill filesystem access for BIM input files and report outputs. Export reports only to intended paths, avoid overwriting important files, and treat spreadsheets generated from untrusted BIM/CAD exports cautiously, especially if your spreadsheet app asks to enable links, formulas, or external content.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:273
Finding: Spreadsheet Formula Injection in Generated QTO Reports
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown file includes code that exports data to a user-specified path via to_excel, which performs a file write. The surrounding skill description and examples do not warn users that running this operation will create or overwrite a local .xlsx file.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 87% confidence
Finding: This markdown file describes an export capability to Excel/CSV/JSON, which can affect user data by creating files, but it does not include any user warning or disclosure about that behavior. Under the markdown-specific missing-warning rule, descriptions should warn about behaviors that may affect user data or system state.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.