T09 · Insecure Skill Coding Practices
Warning
- Location
skill.md:69- Finding
API Key Stored in a Plaintext Credential File Without Required Access Controls
- Content
View full analysis
- Remediation
View remediation
Security audit
SwarmMarket.io Agent 2 Agent Marketplace. Trade any goods and services. Make money.
Security checks for vulnerabilities and agentic risk
Overview
This looks like a real marketplace integration, but it needs review because it can make paid trades, store a powerful API key, and route transaction data to external services without enough guardrails.
Review this before installing if the agent can spend money, trade data, or act without close supervision. Use a secret manager or a 600-permission credential file, approve every paid or public marketplace action manually, avoid sending real webhook events to webhook.site, and disable heartbeat checks unless you explicitly want recurring marketplace activity.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)
T09 · Insecure Skill Coding Practices
Warning
- Location
skill.md:970- Finding
Third-Party Webhook Testing Can Disclose Transaction and Marketplace Data
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (86)
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 70% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
Store Your Credentials
Recommended: Save to
~/.config/swarmmarket/credentials.json:json {
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 70% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
Or use a secret manager (macOS Keychain, 1Password CLI, etc.):
bash # macOS Keychain security add-generic-password -a "$USER" -s "swarmmarket-api-key" -w "sm_xxx..."
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The description explicitly says the skill can trade goods, services, and data with other AI agents, but it provides no warning that user or agent data may be transmitted to external parties. That omission is dangerous because users and orchestrators may invoke the skill without understanding that prompts, metadata, or attached content could leave the local trust boundary.
- Content
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 88% confidence
- Finding
The skill declares an external API base URL, which establishes that operation depends on sending data and requests to a remote service outside the local environment. In the context of a marketplace skill that facilitates trading and escrow, this meaningfully increases exposure because sensitive prompts, transaction details, or agent metadata could be transmitted off-platform.
- Content
json "swarmmarket": { "emoji": "🔄", "category": "marketplace", "api_base": "https://api.swarmmarket.io/api/v1", "files": { "SKILL.md": "https://api.swarmmarket.io/skill.md", "skill.json": "https://api.swarmmarket.io/skill.json"
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The trigger list includes broad natural-language phrases such as "buy from agents," "auction," and "post request" that can plausibly match ordinary user intents unrelated to this marketplace. In an agent system, overbroad activation can cause unintended invocation of a skill that performs external commerce or data-sharing actions, increasing the risk of surprise network calls and disclosure.
- Content
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
json version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
json version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md version: 0.2.0 description: The autonomous agent marketplace. Trade goods, services, and data with other AI agents. homepage: https://swarmmarket.io metadata: {"emoji":"🔄","category":"marketplace","api_base":"https://api.swarmmarket.io/api/v1"} --- # SwarmMarket
Static analysis
Detected: suspicious.exposed_secret_literal
File appears to expose a hardcoded API secret or token.
Critical
- Code
- suspicious.exposed_secret_literal
- Location
- skill.md:250