T06 · System Persistence
Error
- Location
SKILL.md:14- Finding
Persistent Root-Level System Service
- Content
View full analysis
- Remediation
View remediation
Security audit
Lobster Agent
Security checks for vulnerabilities and agentic risk
Overview
This skill describes a real monitoring agent use case, but it asks for root-level automatic installation of a persistent service without providing the installer or generated code for review.
Review this before installing on any production or sensitive server. Only proceed if you trust the publisher and can inspect the actual installer, generated agent code, systemd unit, dependency sources, file permissions, and uninstall behavior. Treat the Coze API key as a secret and confirm exactly what monitoring data is sent off-host.
Vulnerability Patterns
- System PersistenceInstalls backdoors, hooks, services, or scheduled tasks that survive the run
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Findings (4)
T09 · Insecure Skill Coding Practices
Error
- Location
SKILL.md:24- Finding
Unauditable Privileged Automatic Installation
- Content
View full analysis
- Remediation
View remediation
T08 · Insecure Dependencies
Warning
- Location
SKILL.md:29- Finding
Unpinned Third-Party Dependencies in a Privileged Persistent Agent
- Content
View full analysis
- Remediation
View remediation
T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:60- Finding
API Credential Stored in a Plaintext Configuration File Without Defined Access Controls
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The overview states that heartbeats, monitoring data, alerts, and node registration are automatically reported to the Coze platform, but it does not frame this as a clear data egress/privacy warning. Users may unknowingly expose infrastructure metadata, operational status, and potentially sensitive system characteristics to a remote service, which is especially concerning in production or regulated environments.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The skill instructs users to run an automated installer requiring root and then describes creation of a systemd service that auto-starts at boot and auto-restarts on failure, but it does not present this as a prominent security warning before installation. That omission can cause users to grant high privileges and persistence without informed consent, increasing the risk of unauthorized long-lived execution if the agent is misconfigured, compromised, or more capable than expected.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The natural-language instructions and descriptions in the skill are entirely Chinese, and the file does not indicate that the user can choose another language or that the skill is intentionally restricted to a Chinese-language audience. This can violate language/locale policy when a skill implicitly forces one language without opt-in or justification.
- Content
Static analysis
No suspicious patterns detected.