Security audit

NBA-games

Security checks for vulnerabilities and agentic risk

Overview

This is a narrow NBA schedule helper, but it downloads an unpinned third-party Python script during setup.

Install only if you are comfortable trusting the referenced GitHub script. Safer practice is to review the downloaded Python file, pin it to a specific commit, and add checksum or signature verification before relying on it.

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Context-Inappropriate Capability

Medium

Confidence: 95% confidence
Finding: The skill instructs the agent to download executable Python code directly from a third-party GitHub repository into the local skill directory without pinning a version, verifying integrity, or reviewing contents. Because the skill's purpose is only to retrieve NBA schedules/results, this introduces unnecessary remote code supply-chain risk: if the upstream repo is compromised or changed, the agent may fetch and later run attacker-controlled code.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The install steps silently fetch remote code from GitHub and write it into the user's home directory without explicit warning or consent language. Even aside from the supply-chain issue, this is dangerous because it modifies local files and establishes a persistent executable artifact in a hidden directory, increasing the chance of unnoticed compromise or unexpected behavior.

Static analysis

No suspicious patterns detected.