T08 · Insecure Dependencies
Error
- Location
SKILL.md:8- Finding
Execution of an Unreviewable External MCP Component
- Content
View full analysis
- Remediation
View remediation
Security audit
Paragon MLS Fetch Listings
Security checks for vulnerabilities and agentic risk
Overview
This skill needs review because its core MLS tool runs code from outside the submitted package and includes an external npm build step that cannot be verified here.
Install only if you control and trust the external paragon-mls-mcp project at the referenced path, have reviewed its source and npm dependencies, and can run it in a low-privilege environment without sensitive local credentials. Prefer a version that packages the MCP source, lockfile, and a project-relative or integrity-checked executable.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)
T08 · Insecure Dependencies
Error
- Location
scripts/build.sh:3- Finding
Unpinned npm Installation Executes an Unaudited External Dependency Graph
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 99% confidence
- Finding
The declared purpose is an MLS data retrieval/parsing capability, but the supplied code chunk is only a project build script. It installs Node.js dependencies and builds the project locally; it contains no logic for resolving Paragon links or GUIDs, fetching active listings, or parsing property records. This is a materially different primary purpose, so it should be flagged as a mismatch.
- Content