Security audit

jp-supplier-due-diligence

Security checks for vulnerabilities and agentic risk

Overview

The verdict is benign with medium confidence: the scans found no AIG issues, and the external API references were treated as expected for the skill’s stated purpose, though some references were unresolved.

The verdict is benign, but confidence is medium and the Skillspector scan was partial: it reported unresolved local path-like references. Review which information you choose to send to the referenced external service before using the skill, and share only information appropriate for that service.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (34)

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 29)May include surrounding context.
md
1. **API key (recommended).** If the environment has `JPVERIFY_API_KEY` (a `jpv_live_…` key the user created), send it on every call: - HTTP: header `Authorization: Bearer $JPVERIFY_API_KEY` (or `X-API-Key`). - MCP: if the JPVerify Claude Code plugin is installed, the `jpverify` MCP server is already configured and uses the key saved in the plugin's settings (`/plugin` → JPVerify → Configure), not `JPVERIFY_API_KEY`. Otherwise: `claude mcp add --transport http jpverify https://api.jpverify.com/mcp --header "Authorization: Bearer $JPVERIFY_API_KEY" --header "X-JPVerify-Client: jp-supplier-due-diligence/1.3.0"` Each successful call is deducted from the user's prepaid USD credits; failed or invalid calls are refunded automatically. Before a large batch, check the balance for free: `GET https://api.jpverify.com/v1/account/balance` with the same header, or the MCP tool `jpverify_balance`. 2. **x402 wallet.** If you have an x402 client with USDC on Base (`eip155:8453`) and the user

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 30)May include surrounding context.
md
eady configured and uses the key saved in the plugin's settings (`/plugin` → JPVerify → Configure), not `JPVERIFY_API_KEY`. Otherwise: `claude mcp add --transport http jpverify https://api.jpverify.com/mcp --header "Authorization: Bearer $JPVERIFY_API_KEY" --header "X-JPVerify-Client: jp-supplier-due-diligence/1.3.0"` Each successful call is deducted from the user's prepaid USD credits; failed or invalid calls are refunded automatically. Before a large batch, check the balance for free: `GET https://api.jpverify.com/v1/account/balance` with the same header, or the MCP tool `jpverify_balance`. 2. **x402 wallet.** If you have an x402 client with USDC on Base (`eip155:8453`) and the user approved a budget, call without a key: the API answers HTTP 402 with the exact price; sign and retry with `PAYMENT-SIGNATURE`. Pay only within the approved budget. 3. **Neither.** Do not pay and do not invent a key. The MCP server also works without a key for the free tool `jpverify_guide` (`claude mcp

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 32)May include surrounding context.
md
SD credits; failed or invalid calls are refunded automatically. Before a large batch, check the balance for free: `GET https://api.jpverify.com/v1/account/balance` with the same header, or the MCP tool `jpverify_balance`. 2. **x402 wallet.** If you have an x402 client with USDC on Base (`eip155:8453`) and the user approved a budget, call without a key: the API answers HTTP 402 with the exact price; sign and retry with `PAYMENT-SIGNATURE`. Pay only within the approved budget. 3. **Neither.** Do not pay and do not invent a key. The MCP server also works without a key for the free tool `jpverify_guide` (`claude mcp add --transport http jpverify https://api.jpverify.com/mcp`); use it to confirm which call fits, then tell the user they can create a free account with starter credit at https://www.jpverify.com/signup?ref=jp-supplier-due-diligence and set `JPVERIFY_API_KEY`. Always send `X-JPVerify-Client: jp-supplier-due-diligence/1.3.0` on HTTP calls. Never print, log or share the API key.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 8)May include surrounding context.
POST /v1/jp/companies/resolve — $0.25

bash
curl -X POST https://api.jpverify.com/v1/jp/companies/resolve \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-supplier-due-diligence/1.3.0" \ -H "Content-Type: application/json" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 19)May include surrounding context.
md
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/companies/resolve", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-supplier-due-diligence/1.3.0"}, json={"name": "Murata Manufacturing Co., Ltd.", "prefecture": "Kyoto"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 31)May include surrounding context.
POST /v1/jp/suppliers/resolve — $0.10

bash
curl -X POST https://api.jpverify.com/v1/jp/suppliers/resolve \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-supplier-due-diligence/1.3.0" \ -H "Content-Type: application/json" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 42)May include surrounding context.
md
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/suppliers/resolve", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-supplier-due-diligence/1.3.0"}, json={"name": "株式会社ABC", "registration_number": "T1013301046627", "response_language": "both"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 77)May include surrounding context.
POST /v1/jp/regulated-entities/verify — $0.03

bash
curl -X POST https://api.jpverify.com/v1/jp/regulated-entities/verify \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-supplier-due-diligence/1.3.0" \ -H "Content-Type: application/json" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 88)May include surrounding context.
md
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/regulated-entities/verify", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-supplier-due-diligence/1.3.0"}, json={"corporate_number": "1234567890123", "categories": ["funds_transfer_business"], "response_language": "en"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 100)May include surrounding context.
GET /v1/jp/filings — $0.01

bash
curl -G https://api.jpverify.com/v1/jp/filings \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-supplier-due-diligence/1.3.0" \ --data-urlencode 'edinet_code=E00000' \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 112)May include surrounding context.
md
import os, requests response = requests.get( "https://api.jpverify.com/v1/jp/filings", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-supplier-due-diligence/1.3.0"}, params={"edinet_code": "E00000", "limit": 20, "response_language": "en"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 102)May include surrounding context.
API key:

bash
curl -X POST https://api.jpverify.com/v1/jp/companies/resolve \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-supplier-due-diligence/1.3.0" \ -H "Content-Type: application/json" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 102)May include surrounding context.
API key:

bash
curl -X POST https://api.jpverify.com/v1/jp/companies/resolve \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-supplier-due-diligence/1.3.0" \ -H "Content-Type: application/json" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 113)May include surrounding context.
md
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/companies/resolve", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-supplier-due-diligence/1.3.0"}, json={"name": "Murata Manufacturing Co., Ltd.", "prefecture": "Kyoto"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 126)May include surrounding context.
bash
# No key: shows the HTTP 402 x402 price; pay with an x402 client and retry with PAYMENT-SIGNATURE. curl -i -X POST https://api.jpverify.com/v1/jp/companies/resolve \ -H "X-JPVerify-Client: jp-supplier-due-diligence/1.3.0" \ -H "Content-Type: application/json" \ -d '{"name": "Murata Manufacturing Co., Ltd.", "prefecture": "Kyoto"}'

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 54)May include surrounding context.
POST /v1/jp/invoices/check-issuer — $0.05

bash
curl -X POST https://api.jpverify.com/v1/jp/invoices/check-issuer \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-supplier-due-diligence/1.3.0" \ -H "Content-Type: application/json" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 65)May include surrounding context.
md
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/invoices/check-issuer", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-supplier-due-diligence/1.3.0"}, json={"registration_number": "T1013301046627", "supplier_name": "株式会社ABC", "address": "東京都千代田区千代田1-1", "invoice_date": "2026-11-01", "response_language": "both"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 70% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 112)May include surrounding context.
python
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/companies/resolve", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-supplier-due-diligence/1.3.0"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 112)May include surrounding context.
python
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/companies/resolve", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-supplier-due-diligence/1.3.0"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 64)May include surrounding context.
python
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/invoices/check-issuer", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-supplier-due-diligence/1.3.0"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 132)May include surrounding context.
-d '{"name": "Murata Manufacturing Co., Ltd.", "prefecture": "Kyoto"}'

text
Full SDK examples (Python `x402`, JavaScript `@x402/fetch`): https://api.jpverify.com/docs/x402 ## Limits and privacy / 制限とプライバシー

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 139)May include surrounding context.
md
- Results are a **public-registry pre-check** with the source and as-of date of the data. They are not KYB, AML or sanctions screening, and not legal, tax or accounting advice. A "not found" does not mean the entity does not exist or is risky. - If `manual_review_required` is true or a status is ambiguous, show the evidence to the user and let them decide; do not decide on their behalf. - Only send data the user is entitled to process. JPVerify takes fields, not files; do not send personal details (names, phone numbers, e-mail addresses) that a check does not need. - Docs: API key https://api.jpverify.com/docs/api-key · x402 https://api.jpverify.com/docs/x402 · terms https://api.jpverify.com/en/terms · privacy https://api.jpverify.com/en/privacy

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 139)May include surrounding context.
md
- Results are a **public-registry pre-check** with the source and as-of date of the data. They are not KYB, AML or sanctions screening, and not legal, tax or accounting advice. A "not found" does not mean the entity does not exist or is risky. - If `manual_review_required` is true or a status is ambiguous, show the evidence to the user and let them decide; do not decide on their behalf. - Only send data the user is entitled to process. JPVerify takes fields, not files; do not send personal details (names, phone numbers, e-mail addresses) that a check does not need. - Docs: API key https://api.jpverify.com/docs/api-key · x402 https://api.jpverify.com/docs/x402 · terms https://api.jpverify.com/en/terms · privacy https://api.jpverify.com/en/privacy

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 139)May include surrounding context.
md
- Results are a **public-registry pre-check** with the source and as-of date of the data. They are not KYB, AML or sanctions screening, and not legal, tax or accounting advice. A "not found" does not mean the entity does not exist or is risky. - If `manual_review_required` is true or a status is ambiguous, show the evidence to the user and let them decide; do not decide on their behalf. - Only send data the user is entitled to process. JPVerify takes fields, not files; do not send personal details (names, phone numbers, e-mail addresses) that a check does not need. - Docs: API key https://api.jpverify.com/docs/api-key · x402 https://api.jpverify.com/docs/x402 · terms https://api.jpverify.com/en/terms · privacy https://api.jpverify.com/en/privacy

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 139)May include surrounding context.
md
- Results are a **public-registry pre-check** with the source and as-of date of the data. They are not KYB, AML or sanctions screening, and not legal, tax or accounting advice. A "not found" does not mean the entity does not exist or is risky. - If `manual_review_required` is true or a status is ambiguous, show the evidence to the user and let them decide; do not decide on their behalf. - Only send data the user is entitled to process. JPVerify takes fields, not files; do not send personal details (names, phone numbers, e-mail addresses) that a check does not need. - Docs: API key https://api.jpverify.com/docs/api-key · x402 https://api.jpverify.com/docs/x402 · terms https://api.jpverify.com/en/terms · privacy https://api.jpverify.com/en/privacy

jp-supplier-due-diligence

Overview

A.I.G

SkillSpector

External Transmission

External Transmission

External Transmission

External Transmission

`POST /v1/jp/companies/resolve` — $0.25

External Transmission

External Transmission

`POST /v1/jp/suppliers/resolve` — $0.10

External Transmission

External Transmission

`POST /v1/jp/regulated-entities/verify` — $0.03

External Transmission

External Transmission

`GET /v1/jp/filings` — $0.01

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

`POST /v1/jp/invoices/check-issuer` — $0.05

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

Overview

A.I.G

SkillSpector

External Transmission

External Transmission

External Transmission

External Transmission

POST /v1/jp/companies/resolve — $0.25

External Transmission

External Transmission

POST /v1/jp/suppliers/resolve — $0.10

External Transmission

External Transmission

POST /v1/jp/regulated-entities/verify — $0.03

External Transmission

External Transmission

GET /v1/jp/filings — $0.01

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

POST /v1/jp/invoices/check-issuer — $0.05

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

`POST /v1/jp/companies/resolve` — $0.25

`POST /v1/jp/suppliers/resolve` — $0.10

`POST /v1/jp/regulated-entities/verify` — $0.03

`GET /v1/jp/filings` — $0.01

`POST /v1/jp/invoices/check-issuer` — $0.05