日本雅虎拍卖估价

• Outcome: Review
• Latest audit: May 28, 2026 at 9:49 AM UTC
• Version:
  1.0.3

Overview

This skill performs the advertised auction-price lookup, but its script can execute unintended local shell commands if given crafted item IDs or proxy settings.

Review before installing. Only run this version with trusted, normal-looking auction IDs and a proxy value that contains no credentials or shell metacharacters. A safer release should validate auction IDs, avoid execSync shell strings, use native HTTP or spawn/execFile argument arrays, and mask proxy values in output.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Context-Inappropriate Capability

Medium

• Confidence: 97% confidence
• Finding: The script builds a shell command string and executes it with execSync, interpolating the PROXY environment variable directly into the command without shell escaping. Because PROXY_SOCKS5 is attacker-controllable in many execution environments, this creates a command-injection path that can lead to arbitrary shell command execution, which is far more dangerous than the skill's stated auction-estimation purpose requires.

VirusTotal

65/65 vendors flagged this skill as clean.