Running R Analysis In Existing Projects

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 12:37 AM UTC
• Version: 0.1.0

Overview

This skill is a straightforward R-project analysis helper; it can modify project outputs and install R packages, but those actions are disclosed and aligned with its stated purpose.

Install this skill only in projects where you are comfortable letting the agent read and edit analysis scripts, reports, and generated results. Use version control or backups before reruns, and require the agent to show exact package installs or output overwrites before proceeding.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: README.md:127

Finding

Unpinned Third-Party Package Installation

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The README explicitly states that the skill will re-run analyses, regenerate plots, and re-render reports, which implies modifying project files and overwriting generated artifacts. In a code-editing skill this behavior is expected, but the lack of any warning, confirmation step, or backup guidance creates a real safety risk because users may lose prior outputs or unintentionally apply broad changes across an existing project.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The README says the skill detects and installs missing packages, including from CRAN and Bioconductor, but does not warn that this changes the user's R environment and may introduce unreviewed dependencies. In an existing project context, environment mutation can break reproducibility, alter locked dependency state, or execute package installation hooks without the user clearly consenting.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The skill explicitly states it may recompute results, overwrite outputs in results/, and re-render reports, but it does not require explicit confirmation, backups, or a dry-run before modifying project artifacts. In an existing analysis project, this can unintentionally destroy prior outputs, replace trusted reports, or make it harder to distinguish original results from agent-generated changes.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.