Security audit

捷帮时区转换

Security checks for vulnerabilities and agentic risk

Overview

This timezone skill does what it says, but it uses an admin-style secret and sends user input to an external API without enough disclosure.

Install only if you are comfortable with timezone inputs being processed by jiebang.site and with the runtime providing an admin-style API key to that service. Prefer a version that uses local timezone libraries or a narrowly scoped API token, and that explicitly documents the external domain and data sent.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 90% confidence
Finding: The skill documentation indicates use of code capabilities involving network access and possibly environment access, but no permissions are declared. Undeclared capabilities reduce transparency and can bypass expected trust controls, especially when the skill calls an external API and may read configuration from environment variables. In this context, the network use is functionally expected for a timezone API, but the lack of explicit declaration is still a real security and governance issue.

Context-Inappropriate Capability

Medium

Confidence: 95% confidence
Finding: The skill retrieves an admin-scoped credential from an environment variable and sends it to an external service on every request. Using an administrative secret for a simple timezone utility violates least privilege and increases blast radius: if the remote service, logs, or downstream integrations are compromised, the attacker may gain elevated access rather than only narrow API access.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: A sensitive credential is injected into the X-Admin-Key header and transmitted to a third-party domain without any disclosure or indication to the user that privileged authentication is being used. Even over HTTPS, this creates security and governance risk because privileged secrets may be exposed through server-side logging, reverse proxies, debugging, or accidental endpoint misuse.

Missing User Warnings

Medium

Confidence: 88% confidence
Finding: The timezone conversion function sends user-provided time and timezone data to an external service without clear user-facing disclosure. While the data seems low sensitivity in this skill context, outbound transfer to a remote domain still creates privacy, compliance, and trust concerns, especially if users assume conversion is local.

Missing User Warnings

Medium

Confidence: 88% confidence
Finding: The query path transmits user-supplied timezone input to a remote API, and even retries with POST after a failing GET, without any clear notice to the user. In a timezone utility this is likely convenience-driven rather than malicious, but it still exposes user input and usage metadata to an external service unexpectedly.

Static analysis

No suspicious patterns detected.