Back to skill

Security audit

Xxd Tool

Security checks for vulnerabilities and agentic risk

Overview

This is a simple binary hex-dump skill with overstated documentation, but no evidence of hidden behavior, persistence, network use, or malicious actions.

Install only if you want a basic hex-dump helper, and verify capabilities before relying on the documented reverse, patch, bit, JSON, or include modes. If using any patching workflow, work on a copy or keep a backup of the target file.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Tp4

High
Category
MCP Tool Poisoning
Confidence
95% confidence
Finding

The provided code implements only one portion of the declared description: generating a hex dump. It does not include functionality to reconstruct binary data from hex, perform bit-level analysis, or apply patches. While the existing behavior is consistent with part of the description, the declared purpose materially overstates the implemented capabilities, so this is a mismatch.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown file documents a --patch OFFSET:HEX option that applies a hex patch at a byte offset, which can alter binary files and potentially corrupt data. The description and examples present the operation as routine but do not include any warning about modifying files, backing up targets, or the risk of irreversible changes.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.