T08 · Insecure Dependencies
Warning
- Location
README.md:93- Finding
Unpinned executable dependency and mutable remote installation sources
- Content
View full analysis
- Remediation
View remediation
Security audit
Boosta Long to Shorts
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward Boosta API helper, with external API and API-key use that match its stated video-processing purpose.
Before installing, prefer the ClawHub package or a pinned commit/release over the unversioned npx/GitHub examples, and only submit video URLs you are allowed to share with Boosta. Store BOOSTA_API_KEY as an environment variable and avoid exposing it in logs or prompts.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (8)
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
- Content
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 93% confidence
- Finding
The skill requires network access and environment-secret access but does not declare an explicit tool scope such as permissions or allowed-tools. That creates an overbroad execution model where an agent may invoke capabilities beyond what a reviewer or user can easily verify, increasing the risk of unintended secret exposure or unauthorized outbound requests.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The skill instructs sending user-provided video URLs to a third-party API but does not include a clear user-facing disclosure that the URL and associated processing metadata will be shared with Boosta. This can lead to privacy and compliance issues, especially if the URL contains private, unlisted, tokenized, or otherwise sensitive content.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 85% confidence
- Finding
This code submits
video_url,video_type, and optional configuration data to the remote Boosta API via_request, which performs outbound HTTP calls. While the CLI help describes the command purpose, there is no explicit warning, confirmation, or disclosure in the code about sending user-provided data to an external service.- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The README promotes sending video URLs and API-key-authenticated requests to a third-party service but does not clearly warn users that their content metadata and possibly sensitive source links will be shared externally. In an automation/agent context, this can lead to unintentional disclosure of private or proprietary media inputs because users may assume processing is local or not fully appreciate the privacy implications.
- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 81% confidence
- Finding
The code reads an API key from an environment variable and uses it for authenticated requests, but only reports when the variable is missing. There is no user-facing disclosure that the skill requires and will use a sensitive credential for external API access.
- Content
Static analysis
No suspicious patterns detected.