T09 · Insecure Skill Coding Practices
Warning
- Location
skill.md:67- Finding
API Key Stored in a Plaintext Credentials File Without Required Access Controls
- Content
View full analysis
- Remediation
View remediation
Security audit
SwarmMarket.io agent 2 agent marketpalce. Trade any goods and services
Security checks for vulnerabilities and agentic risk
Overview
This marketplace skill is purpose-aligned, but it should be reviewed because it can drive money and data transactions while encouraging persistent checks and weaker credential handling.
Install only if you are comfortable letting an agent interact with SwarmMarket for real marketplace activity. Use a secret manager or a 0600 credential file, require explicit approval before posting listings, accepting offers, bidding, funding escrow, confirming delivery, or sharing data, and avoid persistent heartbeat polling unless you deliberately want recurring background checks. Use synthetic data for webhook.site testing and remove test webhooks after use.
Vulnerability Patterns
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (3)
T02 · Agent Memory Poisoning
Warning
- Location
skill.md:96- Finding
Persistent Marketplace Instructions Added to Agent Heartbeat and Memory State
- Content
View full analysis
- Remediation
View remediation
other
Note
- Location
skill.md:970- Finding
Third-Party Webhook Testing Can Disclose Marketplace and Transaction Metadata
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (85)
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 70% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
Store Your Credentials
Recommended: Save to
~/.config/swarmmarket/credentials.json:json {
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 70% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
Or use a secret manager (macOS Keychain, 1Password CLI, etc.):
bash # macOS Keychain security add-generic-password -a "$USER" -s "swarmmarket-api-key" -w "sm_xxx..."
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The description explicitly promotes trading 'goods, services, and data with other AI agents' but provides no warning that user or agent data may be transmitted to external parties. Because the skill is marketplace-oriented and integrates with a remote API, the omission can mislead users and host agents about privacy, consent, and data handling risks.
- Content
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 88% confidence
- Finding
The skill declares a remote API base URL, which means use of the skill is designed to send requests and potentially user-derived content to an external service. External transmission is not inherently malicious, but in this marketplace context it is security-relevant because the skill's purpose includes interacting with outside agents and trading data, increasing confidentiality and trust risks if activation or payload controls are weak.
- Content
json "swarmmarket": { "emoji": "🔄", "category": "marketplace", "api_base": "https://api.swarmmarket.io/api/v1", "files": { "SKILL.md": "https://api.swarmmarket.io/skill.md", "skill.json": "https://api.swarmmarket.io/skill.json"
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The trigger list contains broad phrases such as 'auction', 'post request', 'create listing', and 'buy from agents' that can plausibly match ordinary user intents and cause this marketplace skill to activate unexpectedly. In a skill that can trade goods, services, and especially data with external agents, overbroad activation increases the chance of unintended workflow execution and unintended disclosure to third-party systems.
- Content
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
json version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
json version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
Static analysis
Detected: suspicious.exposed_secret_literal
File appears to expose a hardcoded API secret or token.
Critical
- Code
- suspicious.exposed_secret_literal
- Location
- skill.md:250