T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:74- Finding
Recommended Installation Executes a Mutable Remote Script Directly with Bash
- Content
View full analysis
- Remediation
View remediation
Security audit
Mirroir
Security checks for vulnerabilities and agentic risk
Overview
The skill is clearly meant to control an iPhone, but its recommended install and runtime paths execute mutable remote code while asking for screen, input, and helper-daemon privileges.
Review this carefully before installing. Prefer a verified, version-pinned Homebrew or local binary install over the curl-to-bash or unpinned npx paths, grant Screen Recording and Accessibility only if you need full phone control, avoid using it on sensitive screens, and delete screenshots or recordings that contain private information.
Vulnerability Patterns
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (2)
T08 · Insecure Dependencies
Error
- Location
SKILL.md:83- Finding
Unpinned npm Package Is Repeatedly Retrieved and Executed Through npx
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The skill advertises screenshots, OCR, and screen recording of a real iPhone without an explicit privacy warning about capturing sensitive on-screen information such as messages, passwords, MFA codes, health data, or financial information. Because the entire value of the skill is broad device visibility and interaction across any app, the privacy risk is heightened by context rather than reduced.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The skill advertises screenshots, OCR, and screen recording of a real iPhone without an explicit privacy warning about capturing sensitive on-screen information such as messages, passwords, MFA codes, health data, or financial information. Because the entire value of the skill is broad device visibility and interaction across any app, the privacy risk is heightened by context rather than reduced.
- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 93% confidence
- Finding
The skill instructs users to run an MCP server via
npxwithout pinning an exact package version, which allows whatever the latest published package is at execution time. If the package is compromised, typo-squatted, or a malicious update is published, users could execute attacker-controlled code locally with the privileges of their terminal session.- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 94% confidence
- Finding
The troubleshooting/setup instruction
npx iphone-mirroir-mcp setupalso executes an unpinned package version from the registry. Because this command is specifically used to install or reinstall a helper daemon, compromise here could lead to persistent local code execution and elevated trust by the user.- Content
Static analysis
No suspicious patterns detected.