Security audit

Fs Street

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it says: fetches and formats Farnam Street RSS articles, with no evidence of hidden persistence, credential use, destructive behavior, or unrelated data access.

Install dependencies in an isolated environment and consider pinning versions before use. Treat fetched RSS article content as external website content, but the skill itself does not show hidden access, persistence, or destructive behavior.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:64
Finding: Unpinned Third-Party Dependencies
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 89% confidence
Finding: The skill invokes a network-dependent script (fetch_blog.py) and even documents required packages like requests, but the manifest does not declare any tool scope such as permissions or allowed-tools. This creates a capability/metadata mismatch: a host may allow undeclared network access or fail to enforce least privilege, making the skill harder to sandbox and audit.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 83% confidence
Finding: The Quick Start and Query Types sections present invocation examples exclusively in Chinese, such as '昨天的文章' and '关于决策的文章', while the surrounding documentation is in English. This can indicate a language-specific usage constraint without explicit opt-in or justification, which matches the locale-policy concern for natural-language policy violations.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.