Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - `SKILL.md` — this file
Security audit
markdown-toc
Security checks for vulnerabilities and agentic risk
Overview
This skill is a simple Markdown table-of-contents generator that reads a user-specified file and prints output without network access, persistence, credential use, or file mutation.
This appears safe to install for local Markdown TOC generation. Review the generated TOC before pasting it into documents, especially for headings with non-Latin characters or accents because the slug generation is ASCII-oriented and may produce imperfect anchors.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
Without declared permissions the skill's intent is opaque and cannot be validated.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The line states that Chinese/Japanese/Korean characters and accented text are stripped to ASCII equivalent where possible, which encodes a language/locale preference into the skill behavior. Because the documentation does not present this as an opt-in choice or justify it as a region-specific constraint, it fits the language/locale policy-violation category.
- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 77% confidence
- Finding
This markdown file describes generating a TOC string that users can paste back into their document, which affects user content, but it does not include any caution about reviewing placement or backing up the file before editing. Under the markdown-file criteria for missing user warnings, this is a minor omission because the behavior can alter user data if followed blindly.
- Content