Back to skill

Security audit

Windows-Android_SSH_Remote_Control

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed manual guide for Android-to-Windows remote access, with real remote-access risks but no hidden automation or data-stealing behavior found.

Install only if you intentionally want to set up remote access to your own Windows PC. Prefer Tailscale or another VPN over exposing SSH to the internet, use SSH keys and strong account passwords, and be careful about where Windows credentials are saved.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Tp4

High
Category
MCP Tool Poisoning
Confidence
99% confidence
Finding

The declared description promises a concrete remote-control/setup capability for Windows-Android access over SSH. The actual code does not implement any of that functionality; it merely prints a static message and includes comments indicating it is a placeholder to be replaced later. This is a material description-to-behavior mismatch because the code’s actual behavior is unrelated to the claimed purpose.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

This markdown file describes a workflow involving remote access and explicitly tells the user to provide Windows credentials, but it does not include any warning about protecting those credentials or verifying the remote host. Because the guidance affects user privacy and account security, a brief disclosure would be expected under the missing user warnings criterion.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.