Dataify Facebook Post By URL

• Outcome: Pass
• Latest audit: Jul 16, 2026 · 8:43 PM UTC
• Version: 1.2.0

Overview

This skill is a disclosed Dataify submission helper that uses a Dataify API token and Facebook post URLs for its stated purpose, with some consent and invocation-scope caveats users should notice.

Install only if you intend to submit Facebook post URLs to Dataify. Review when it activates because it may use a saved DATAIFY_API_TOKEN and send the selected Facebook URL parameters to Dataify; avoid storing the token on shared machines unless you are comfortable with future reuse.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (4)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 90% confidence
• Finding: The skill instructs the agent to access local environment variables and make outbound network requests, but no explicit permissions are declared. This creates a capability/consent mismatch: a user may invoke a seemingly simple scraping skill without clear notice that it can read locally saved secrets and send data to an external service.

Vague Triggers

Medium

• Confidence: 83% confidence
• Finding: The invocation text is overly broad because it includes generic triggers like task_id/status handling, token configuration, and troubleshooting. That increases the chance the skill activates in conversations not actually requesting submission, which could lead to unintended token handling or external task submission in the wrong context.

Vague Triggers

Medium

• Confidence: 86% confidence
• Finding: The skill enables implicit invocation while advertising a broad, generic trigger surface around Facebook post collection and related troubleshooting. This can cause the agent to invoke the skill in situations the user did not clearly intend, potentially sending URLs or task parameters to an external service and creating privacy, consent, or unnecessary external-action risks.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

- If the user provides a token in the request, use it for this run.
- If no token is provided, first check whether `DATAIFY_API_TOKEN` is already saved locally in the environment.
- If `DATAIFY_API_TOKEN` is saved locally, use it without asking the user to re-enter the token.
- If no token is available locally, tell the user they need to provide a Dataify API TOKEN.
- If the user does not have an API TOKEN, tell them they can register or log in at [Dataify](https://dashboard.dataify.com/login?utm_source=skill) to get one.
- If the user already has an API TOKEN, tell them it is available in the top-right area of [Dataify](https://dashboard.dataify.com?utm_source=skill).

• Confidence: 88% confidence
• Finding: The skill is instructed to automatically read a locally saved DATAIFY_API_TOKEN and use it without re-prompting the user. While convenient, this is an autonomous use of a stored credential that may exceed the user's immediate expectations, especially if the skill was triggered loosely or in a shared environment.

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.