Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward R environment troubleshooting guide, but users should review any package or system install commands before running them.
Before installing, understand that this skill may lead the agent to recommend or run commands that change your R libraries or install system packages. Review sudo, dnf, apt, brew, renv restore/update, PATH, and permission changes before approving them, especially on shared or production machines.
The skill includes system-modifying package installation guidance, including OS-level dependency installation, without any warning that these commands change the host environment and may require elevated privileges. In an agentic context, such instructions can normalize or trigger unsafe modifications to the user's system, especially if applied automatically or without confirmation.
The README explicitly recommends a sudo apt install command, which invokes privileged system-level changes. Even though the context is legitimate troubleshooting, embedding root-level commands in a skill without guardrails or warnings increases the risk that an agent or user executes them indiscriminately, potentially altering the system, breaking dependencies, or expanding the blast radius of mistakes.
Skill actions:
- Detects missing system libraries (GEOS, GDAL, PROJ)
- Provides Ubuntu/Debian: sudo apt install libudunits2-dev libgdal-dev libgeos-dev libproj-dev
- Provides macOS: brew install pkg-config gdal geos proj udunits
- Retries R package installation
- Confirms successful library loading
The skill explicitly directs actions that can modify the host system and project environment, including installing compilers, development libraries, changing PATH/permissions, and restoring or reinitializing renv libraries, but it does not warn the user that these steps may alter the local machine. In an agent setting, this can lead to unexpected system changes, package breakage, or privilege-requiring operations being suggested or performed without clear user acknowledgment.
The example invocation phrase, "renv restore is broken, please fix it", is broad natural language that could easily match ordinary user requests outside a tightly scoped test context. In a skill-routing system, this increases the chance of unintended activation, causing the agent to enter a troubleshooting workflow and potentially suggest environment-changing actions when the user did not explicitly invoke this skill.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Ubuntu/Debian:
sudo apt install libudunits2-dev libgdal-dev libgeos-dev libproj-dev
macOS:
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Ubuntu/Debian:
sudo apt install libudunits2-dev libgdal-dev libgeos-dev libproj-dev
macOS:
No suspicious patterns detected.