Security audit

autodesk-clean-uninstall

Security checks for vulnerabilities and agentic risk

Overview

This skill is an Autodesk cleanup helper, but it can perform broad, irreversible Windows file and registry deletion with insufficient safeguards.

Review carefully before installing or running. Use only on a backed-up Windows system where you intend a full Autodesk removal, avoid the -Auto option, inspect every deletion target manually, and do not run elevated unless you understand the exact files and registry keys that will be removed.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (3)

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:723
Finding: Unvalidated Parent Directory Discovery Enables Recursive Deletion of Unrelated Data
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:779
Finding: File Association Keys Are Deleted Without Verifying Autodesk Ownership
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:706
Finding: Auto Mode Bypasses All Safety Confirmations for Destructive Operations
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill advertises step-by-step confirmation for dangerous actions, but the one-click script exposes an -Auto mode that suppresses those confirmations and proceeds with process termination, service stopping, file deletion, and registry cleanup. In an agent or automation context, this enables unattended destructive execution and increases the risk of accidental or overly broad system modification.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: There is a documented safety mismatch: the prose promises confirmation for each dangerous action, but the implementation includes an automatic mode that skips confirmations entirely. This is dangerous because users or calling agents may rely on the documentation's safety guarantees while the actual behavior permits silent destructive cleanup.
Content: No source excerpt is available for this finding.

Autonomous Decision Making

Medium

Category: Excessive Agency
Confidence: 75% confidence
Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
Content: Scanner excerpt · SKILL.md (reported line 44)May include surrounding context.
md
--- ## Step 1: Environment Scan (No Confirmation Required) ### Purpose Before executing cleanup, comprehensively scan the system to **obtain actual installation paths from the registry** (not limited to standard Autodesk directories), and list all items to be cleaned. Ensures transparency before cleanup to avoid omissions.

Scope Creep

Low

Category: Excessive Agency
Confidence: 84% confidence
Finding: The skill intentionally broadens cleanup beyond fixed Autodesk paths by harvesting installation locations from the registry and then deleting both those locations and their parent directories. That expansion can capture non-standard or shared directories, making accidental deletion of unrelated files more likely, especially when combined with unattended execution.
Content: Scanner excerpt · SKILL.md (reported line 47)May include surrounding context.
md
## Step 1: Environment Scan (No Confirmation Required) ### Purpose Before executing cleanup, comprehensively scan the system to **obtain actual installation paths from the registry** (not limited to standard Autodesk directories), and list all items to be cleaned. Ensures transparency before cleanup to avoid omissions. ### Intelligent Discovery Logic - Standard directories: `C:\Autodesk`, `C:\Program Files\Autodesk`, etc.