Security audit

Diffbot

Security checks for vulnerabilities and agentic risk

Overview

This Diffbot plugin is a coherent, disclosed integration for web search, Knowledge Graph lookup, extraction, entity resolution, and crawling, with expected external API use.

Install this if you want an agent to use Diffbot’s hosted APIs for web/KG research and site crawling. Review what you send to it: queries, URLs, crawl headers, and pasted text may go to Diffbot, and deleting a crawl job may remove access to that job’s results. Prefer configured plugin credentials over ad hoc secrets in prompts or headers.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The trigger list is very broad and includes common phrases like 'CEO of', 'who works at', and 'who founded', which can cause the skill to activate for ordinary people-related queries without sufficient narrowing. In a people-search skill, overbroad activation increases the chance of unnecessary person-lookup behavior, mishandling of ambiguous requests, or use in contexts involving private individuals despite the stated public-profile limitation.

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The trigger list is unusually broad for a company-search skill, including generic phrases like 'find companies,' 'vendors,' 'suppliers,' and 'who makes,' plus a strong 'MUST USE' directive. In an agentic system, this can cause the skill to activate for common business queries beyond its intended scope, potentially overriding more appropriate skills and steering execution toward external search/tool use when not necessary.

Vague Triggers

Medium

Confidence: 93% confidence
Finding: The trigger list is very broad and includes generic phrases such as 'how to', 'open this URL', and 'summarize this page', which can cause the skill to activate in many situations beyond its intended scope. This can lead to unintended tool use, unnecessary external queries, and possible routing mistakes where a more appropriate or safer skill should have handled the request.

Vague Triggers

Medium

Confidence: 94% confidence
Finding: The trigger text is unusually broad and includes generic phrases such as population queries, lists of places, and nearby places, which can cause the skill to activate for a wide range of common requests. Over-broad activation can improperly override safer or more appropriate skills/tools, increasing the chance of misrouting, unintended data access, or tool use when a direct answer would have sufficed.

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The skill exposes a destructive `delete` action but does not clearly warn that deleting a crawl job may permanently remove the only handle to the job and its associated results. In this context, users may invoke deletion during routine job management without understanding the consequence, leading to accidental loss of crawl data or disruption of ongoing workflows.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The skill sends user-provided text to the external Diffbot NLP API but does not clearly warn users that their submitted content leaves the local environment. This can lead to unintentional disclosure of sensitive, proprietary, or regulated data because users may reasonably assume entity extraction is performed locally or without third-party transmission.

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: dist/api.js:32
Evidence: export function resolveToken(config, env = process.env, credentialsFile) {