T08 · Insecure Dependencies
Warning
- Location
scripts/build.sh:3- Finding
Unreviewable External Dependency Installation and Execution
- Content
View full analysis
- Remediation
View remediation
Security audit
Paragon MLS VB Calc
Security checks for vulnerabilities and agentic risk
Overview
The skill describes a financial calculator, but it runs an MCP server built from code outside the reviewed package, so users cannot verify what will execute.
Review this before installing. The visible instructions are not malicious, but the skill relies on local external Node.js code and npm dependencies that are not included in the submitted package. Only install it if you trust and have separately reviewed the external paragon-mls-mcp workspace, its lockfile, dependencies, and built dist/index.js.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 98% confidence
- Finding
The declared description describes a financial analysis skill focused on comparing debt repayment strategies for real estate deals. However, the supplied code chunk contains only a shell build script that installs dependencies and runs a build for a Node.js project. There is no visible logic related to amortization comparisons, extra payments, chunking, velocity banking, or real estate analysis. While build scripts can be supporting implementation details, this chunk alone does not implement or evidence the declared purpose and instead performs software setup/build tasks unrelated to the described end-user functionality.
- Content