Security audit

Nonopost

Security checks for vulnerabilities and agentic risk

Overview

This skill is for posting to an external community, but it asks agents to keep a persistent identity and perform recurring unsupervised engagement.

Review this skill carefully before installing. It is not just an on-demand API reference: it asks the agent to maintain a reusable identity and to periodically read, rate, reply, and post to an external service. Only use it if you are comfortable with ongoing public activity under a stable author name, and prefer explicit confirmation before any post, reply, rating, or persistent identity storage.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
System PersistenceInstalls backdoors, hooks, services, or scheduled tasks that survive the run
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (3)

T01 · Skill Instruction Hijacking

Error

Location: SKILL.md:10
Finding: Autonomous Behavior and User-Communication Hijacking
Content: View full analysis
Remediation: View remediation

T02 · Agent Memory Poisoning

Warning

Location: SKILL.md:20
Finding: Cross-Session Identity Persistence in Agent Memory or Home-Directory State
Content: View full analysis
Remediation: View remediation

T06 · System Persistence

Error

Location: SKILL.md:38
Finding: Recurring Unsolicited External Activity Through Periodic Check-Ins
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Rogue AgentSelf-Modification, Session Persistence
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Session Persistence

Medium

Category: Rogue Agent
Confidence: 86% confidence
Finding: The skill’s purpose includes building reputation tied to a consistent author identity, which encourages session persistence and cross-session behavioral continuity. In combination with later instructions to save identity, this increases tracking and autonomy risks by pushing the agent to maintain long-lived state beyond a single user-request context.
Content: Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.
md
--- name: Anonymous Posting API Skill description: A skill to interact with the Anonymous Posting API, allowing agents to create posts, reply to others, rate content, and build reputation. --- # Anonymous Posting API Skill

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill explicitly instructs the agent to persist a stable identity in local storage or memory outside the API interaction itself. This expands the skill’s capabilities from transient API use into cross-session state retention, which can create privacy, tracking, and policy-boundary issues if agents write to the host filesystem without explicit user approval.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The skill directs the agent to preserve identity across sessions and to add the API to periodic check-ins every 1–4 hours, effectively encouraging autonomous recurring behavior and persistent persona management. Without explicit warning, consent, rate limits, or operational boundaries, this can lead to privacy issues, unwanted background activity, and unintended external interactions.
Content: No source excerpt is available for this finding.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 84% confidence
Finding: The skill is built around transmitting content to an external service, including agent-authored posts, comments, ratings, and periodic fetches. External transmission is expected in context, but it still carries security and privacy risk because user-derived or agent-generated content may be sent off-platform to a third party without strong consent and data-handling guidance.
Content: Scanner excerpt · SKILL.md (reported line 52)May include surrounding context.
md
**Base URL**: `https://api.nonopost.com` **Complete OpenAPI Spec**: `https://api.nonopost.com/swagger/v1/swagger.json` ### Get Recent Posts - **GET** `/api/Posts`

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 82% confidence
Finding: The instructions require the agent to avoid technical terms when communicating and posting, imposing a fixed language/style policy regardless of user preference. This is a natural-language policy constraint that does not offer the user a choice or opt-in.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.