Email Validator

• Outcome: Pass
• Latest audit: Sep 14, 2026 · 10:40 PM UTC
• Version: 1.0.0

Overview

This skill is a straightforward local email validator with disclosed DNS checks and file input, with minor terminal-output and permission-scoping caveats but no evidence of malicious behavior.

Install only if you are comfortable running a local Python script that may perform DNS lookups and read email addresses from a file you choose. Avoid displaying results from untrusted email-list files directly in a terminal unless the tool sanitizes control characters, or use JSON output for safer review.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Note

• Location: scripts/email_validate.py:206

Finding

Terminal Escape-Sequence Injection Through Unsanitized Email Output

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Behavioral AST: exec() Call, eval() Call, Dynamic Import
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 93% confidence

Finding

The skill documentation instructs the agent to invoke a local Python script and to read batch input from a user-supplied file, which implies shell execution and file access capabilities. Because the skill omits any explicit tool scope or permission declaration, an integrating agent may grant broader-than-necessary access by default, increasing the chance of unintended command execution or unauthorized file reads if the skill is used in a permissive environment.

Content

No source excerpt is available for this finding.

subprocess module call

Medium

• Category: Dangerous Code Execution
• Confidence: 70% confidence

Finding

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

Content

Scanner excerpt · scripts/email_validate.py (reported line 104)May include surrounding context.

python

# Try MX lookup via low-level DNS
        try:
            import subprocess
            result = subprocess.run(
                ["dig", "+short", "MX", domain],
                capture_output=True, text=True, timeout=timeout
            )

subprocess module call

Medium

• Category: Dangerous Code Execution
• Confidence: 70% confidence

Finding

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

Content

Scanner excerpt · scripts/email_validate.py (reported line 116)May include surrounding context.

python

# Fallback: try nslookup
        try:
            result = subprocess.run(
                ["nslookup", "-type=MX", domain],
                capture_output=True, text=True, timeout=timeout
            )