Security audit

Easyimage uploader

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward EasyImages uploader, but it needs review because the helper can upload any readable local file and can send the token and file over plaintext HTTP if configured that way.

Review before installing. Use only a trusted HTTPS EasyImages server, treat EASYIMAGE_TOKEN and delete URLs as secrets, and confirm the exact local image path before each upload. Do not use this skill for sensitive files unless you are comfortable sending them to that server.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (3)

T09 · Insecure Skill Coding Practices

Error

Location: scripts/upload_easyimage.py:124
Finding: Arbitrary Readable Local Files Can Be Uploaded Without Image Validation
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: scripts/upload_easyimage.py:77
Finding: API Token and Uploaded Content May Be Transmitted Over Plaintext HTTP
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/upload_easyimage.py:136
Finding: Unbounded Request and Response Buffering Can Exhaust Process Memory
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (5)

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 44)May include surrounding context.
md
- relative paths are resolved relative to this `SKILL.md` / skill root directory

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 93% confidence
Finding: The skill instructs use of file reads, environment-variable access, and outbound network uploads, but it does not declare any explicit tool scope or permission boundaries in the manifest. That creates an authorization ambiguity: an agent may invoke this skill in broader contexts than intended, including reading local files and sending them to a remote server without clear, machine-readable limits.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The invocation text includes general phrases like 'upload an image' and 'host a picture' without clear scope constraints or exclusion conditions. Because the file does not provide negative examples or a narrower activation context, the skill could be selected for ordinary image-related requests beyond the intended EasyImages/local-file workflow.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The documentation instructs operators to provide a server URL and upload token before sending local image files to an external EasyImages service, but it does not warn about the privacy implications of exfiltrating local content or the need to protect the token as a credential. In a skill explicitly designed to upload local files, this omission can cause users or integrators to unknowingly transmit sensitive images or mishandle secrets, increasing the chance of data leakage or unauthorized uploads.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This code reads a local image file, includes an API token, and sends both to a remote server via HTTP POST. While the CLI description says it uploads an image, the script provides no runtime confirmation, user-facing notice, or inline warning about transmitting local file contents and credentials to an external endpoint.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.