T09 · Insecure Skill Coding Practices
Error
- Location
references/POST_hybrid_update_cookie.md:18- Finding
Authenticated Session Cookies Transmitted to an External Service over Plaintext HTTP
- Content
View full analysis
- Remediation
View remediation
Security audit
gnview-api-downloader
Security checks for vulnerabilities and agentic risk
Overview
This skill is a Douyin data API guide, but it tells users to send full logged-in browser cookies to a hard-coded external HTTP endpoint.
Review this carefully before installing or using. Do not send real Douyin login cookies or account session tokens through the documented HTTP endpoint. Only use the data collection endpoints for authorized, lawful purposes, and prefer a trusted HTTPS service or local processing with clear retention and revocation controls.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (7)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill explicitly supports Douyin data collection, user profile harvesting, and cookie/session maintenance, but the description provides no warning that these actions involve privacy-sensitive data and authenticated session material. This omission can cause users or downstream agents to handle personal data and cookies without appropriate consent, safeguards, or awareness of policy and account-security risks.
- Content
Description-Behavior Mismatch
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The manifest describes this skill as a '抖音数据API工具集' for Douyin data collection scenarios, which implies a Douyin-focused capability. However, this endpoint documentation explicitly includes Bilibili URLs as supported input, expanding the behavior beyond the manifest’s stated platform scope.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The document explicitly describes how to enumerate a Douyin user's full post history and paginate through all available content, but it provides no privacy, consent, or acceptable-use guidance. While the data may be publicly accessible, packaging bulk collection instructions in an API skill increases the risk of large-scale scraping, profiling, and downstream misuse of user content.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The documentation instructs users to send a full Douyin profile URL to an external API gateway endpoint, but it does not warn that user-supplied data will be transmitted to a third party or describe any privacy, trust, or retention implications. In a data-scraping skill that also mentions cookies and authentication, this omission increases the risk that operators will unknowingly disclose browsing targets, identifiers, or authenticated context to infrastructure they do not control.
- Content
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 95% confidence
- Finding
The documentation instructs users to transmit a full authenticated Douyin cookie string, including session-related tokens, to a third-party API endpoint over plain HTTP rather than HTTPS. This exposes highly sensitive session credentials to interception in transit and to misuse by the remote service, enabling account/session hijacking and unauthorized access to the user's Douyin account.
- Content
请求示例:
bash # 基础请求示例 curl -X POST "http://sd79uu743j76vf3vkn7pg.apigateway-cn-beijing.volceapi.com/api/hybrid/update_cookie" \ -H "Content-Type: application/json" \ -d '{ "service": "douyin_web",
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The natural-language description and usage guidance are presented entirely in Chinese, with no indication that users may choose another language or that the locale restriction is intentional and justified. The policy requires flagging language or locale constraints when they are imposed without user opt-in.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
This markdown file contains user-facing documentation in Chinese with some English headings, but it does not state that the skill is intended only for Chinese-speaking users or offer any language/locale choice. Under the language/locale policy, forcing a specific language without opt-in can be a natural-language policy issue.
- Content
Static analysis
No suspicious patterns detected.