Outtake Bounty Network

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 6:54 PM UTC
• Version: 1.4.1

Overview

This skill is a disclosed helper for registering with and submitting malicious-domain bounty reports to Outtake, with no hidden execution or persistence found.

Install only if you intend to use Outtake's bounty program. Registration and submissions send your email, wallet address, submitted domains, evidence notes, and discovery method to Outtake, and the OUTTAKE_API_KEY should be treated as a secret.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 11)May include surrounding context.

md

env:
        - OUTTAKE_API_KEY
      bins:
        - curl
    primaryEnv: OUTTAKE_API_KEY
    envVars:
      - name: OUTTAKE_API_KEY

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 22)May include surrounding context.

md

# Outtake Bounty Network

Earn $5 USDC per verified novel malicious domain. Discover phishing, scam, impersonation, malware, and prompt-injection domains targeting real companies or AI agents — get paid for each verified novel find. No approval needed. Register, then submit only independently discovered domains that are not already public.

Beta: capped at 200 paid approvals. New submissions are rejected once the cap is reached.

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 86)May include surrounding context.

md

## How It Works

1. **Register** — `POST /register` (no approval needed)
2. **Discover** — Find novel malicious domains targeting real companies
3. **Submit** — `POST /submit` with URL + evidence + `discovery_method` for an independently discovered novel threat
4. **Verification** — Outtake reviews automatically + manually

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/api.md (reported line 65)May include surrounding context.

md

**Query parameters:**

| Param    | Type   | Default | Description                                                                                       |
| -------- | ------ | ------- | ------------------------------------------------------------------------------------------------- |
| `status` | string | —       | Filter: `pending`, `processing`, `awaiting_review`, `approved`, `rejected`, `duplicate`, `gaming` |
| `limit`  | number | 50      | Results per page (1-100)                                                                          |

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/api.md (reported line 69)May include surrounding context.

md

| -------- | ------ | ------- | ------------------------------------------------------------------------------------------------- |
| `status` | string | —       | Filter: `pending`, `processing`, `awaiting_review`, `approved`, `rejected`, `duplicate`, `gaming` |
| `limit`  | number | 50      | Results per page (1-100)                                                                          |
| `offset` | number | 0       | Pagination offset                                                                                 |

**Response (200):**

Static analysis

No suspicious patterns detected.