T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:104- Finding
Incomplete Disclosure of Third-Party Network Access
- Content
View full analysis
- Remediation
View remediation
Security audit
Groupon
Security checks for vulnerabilities and agentic risk
Overview
This Groupon skill is a deal-checking assistant with disclosed local notes and approval boundaries, but users should be aware that its third-party browsing disclosure is inconsistent.
Reasonable to install if you want a Groupon deal-screening workflow and are comfortable with local notes under ~/groupon/. Before using it for travel, booking, merchant disputes, or sensitive locations, assume the agent may visit merchant, review, booking, or marketplace sites and share ordinary browsing context unless you explicitly restrict that behavior.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The setup text defines very broad activation triggers such as any mention of Groupon, vouchers, local deals, or budget activities, but does not establish clear exclusions or require sufficient user intent before the skill engages. This can cause the agent to activate in loosely related conversations, collect/store user preferences unnecessarily, or steer the interaction into commerce-oriented behavior without an explicit request.
- Content