Security audit

facequet

Security checks across malware telemetry and agentic risk

Overview

This skill is a simple disclosed web-page reader that fetches a user-provided URL and extracts text, with dependency hygiene issues but no hidden access or persistence.

Install only where outbound web requests are acceptable. Provide only URLs you intend the skill to fetch, avoid private or internal URLs, and pin reviewed dependency versions before using it in a production or sensitive environment.

SkillSpector

By NVIDIA

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Unpinned Dependencies

Low

Category: Supply Chain
Content: requests beautifulsoup4
Confidence: 95% confidence
Finding: The dependency specification for `requests` is unpinned, which allows future installs to resolve to different versions over time. This creates supply-chain and reproducibility risk because a newly released or compromised version could be pulled into the environment without review.

Unpinned Dependencies

Low

Category: Supply Chain
Content: requests beautifulsoup4
Confidence: 95% confidence
Finding: The dependency specification for `beautifulsoup4` is unpinned, so builds are not reproducible and may silently consume newly released package versions. This increases supply-chain exposure and can introduce breaking changes or vulnerable code without any modification to the skill itself.

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High

Category: Supply Chain
Confidence: 92% confidence
Finding: The file includes `requests` without constraining it to a non-vulnerable version, and the analyzer reports multiple known advisories affecting this package. If an affected version is installed, issues such as credential leakage or TLS/verification weaknesses could expose secrets or undermine secure outbound HTTP behavior.

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.