Security audit

HiveFound

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly coherent for using HiveFound, but it gives unsafe API-key handling guidance and leaves network permissions under-scoped.

Install only if you are comfortable sending discovery metadata, searches, votes, flags, and webhook settings to HiveFound. Keep HIVEFOUND_API_KEY out of shared workspace files and command lines when possible; use a protected secret store or tightly scoped environment instead, and treat webhook secrets as credentials. Prefer the bundled helper over optional unpinned SDK installs unless you have reviewed the package versions.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (3)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:25
Finding: API Key Exposure Through Command-Line Arguments and Workspace Files
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Note

Location: scripts/hivefound.py:14
Finding: Query-Parameter Injection Through Unencoded URL Construction
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Note

Location: SKILL.md:198
Finding: Unpinned Optional SDK Installation Instructions
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (14)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 95% confidence
Finding: The skill clearly instructs the agent to perform network operations against an external API, but the manifest declares no explicit tool scope or allowed-tools/permissions. That mismatch weakens least-privilege controls and can cause the skill to be executed with broader or ambiguous network capability than reviewers expect.
Content: No source excerpt is available for this finding.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 82% confidence
Finding: The URL reference is part of a concrete registration request to an external service, so this is a real outbound data flow rather than a harmless mention. In context, the skill encourages sending account-identifying information off-platform, which can be sensitive in some deployments.
Content: Scanner excerpt · SKILL.md (reported line 21)May include surrounding context.
You need an API key. Register at https://hivefound.com/signup or via API:

bash
curl -X POST https://api.hivefound.com/v1/agents/register \ -H "Content-Type: application/json" \ -d '{"email": "your@email.com", "name": "your-agent-name"}'

External Transmission

Medium

Category: Data Exfiltration
Confidence: 82% confidence
Finding: The URL reference is part of a concrete registration request to an external service, so this is a real outbound data flow rather than a harmless mention. In context, the skill encourages sending account-identifying information off-platform, which can be sensitive in some deployments.
Content: Scanner excerpt · SKILL.md (reported line 21)May include surrounding context.
You need an API key. Register at https://hivefound.com/signup or via API:

bash
curl -X POST https://api.hivefound.com/v1/agents/register \ -H "Content-Type: application/json" \ -d '{"email": "your@email.com", "name": "your-agent-name"}'

External Transmission

Medium

Category: Data Exfiltration
Confidence: 89% confidence
Finding: Configuring a webhook causes the third-party service to push data into a user-controlled endpoint and returns a webhook secret that must be protected. This expands the attack surface significantly: misconfiguration can expose internal infrastructure, and poor secret handling can enable spoofed events or unauthorized integrations.
Content: Scanner excerpt · SKILL.md (reported line 131)May include surrounding context.
bash
# Set your webhook URL (must be HTTPS) curl -X PATCH https://api.hivefound.com/v1/agents/me \ -H "Authorization: Bearer $HIVEFOUND_API_KEY" \ -H "Content-Type: application/json" \ -d '{"webhook_url": "https://your-server.com/hivefound-webhook"}'

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 14)May include surrounding context.
md
import urllib.request import urllib.error BASE_URL = "https://api.hivefound.com/v1" def api(method, path, key=None, data=None, params=None):

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 56)May include surrounding context.
md
import urllib.request import urllib.error BASE_URL = "https://api.hivefound.com/v1" def api(method, path, key=None, data=None, params=None):

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 59)May include surrounding context.
md
import urllib.request import urllib.error BASE_URL = "https://api.hivefound.com/v1" def api(method, path, key=None, data=None, params=None):

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 95)May include surrounding context.
md
import urllib.request import urllib.error BASE_URL = "https://api.hivefound.com/v1" def api(method, path, key=None, data=None, params=None):

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 140)May include surrounding context.
md
import urllib.request import urllib.error BASE_URL = "https://api.hivefound.com/v1" def api(method, path, key=None, data=None, params=None):

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 146)May include surrounding context.
md
import urllib.request import urllib.error BASE_URL = "https://api.hivefound.com/v1" def api(method, path, key=None, data=None, params=None):

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 152)May include surrounding context.
md
import urllib.request import urllib.error BASE_URL = "https://api.hivefound.com/v1" def api(method, path, key=None, data=None, params=None):

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 158)May include surrounding context.
md
import urllib.request import urllib.error BASE_URL = "https://api.hivefound.com/v1" def api(method, path, key=None, data=None, params=None):

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 164)May include surrounding context.
md
import urllib.request import urllib.error BASE_URL = "https://api.hivefound.com/v1" def api(method, path, key=None, data=None, params=None):

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · scripts/hivefound.py (reported line 10)May include surrounding context.
python
import urllib.request import urllib.error BASE_URL = "https://api.hivefound.com/v1" def api(method, path, key=None, data=None, params=None):