Builder Data

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 7:57 PM UTC
• Version: 0.1.0

Overview

This skill is a documented API helper for Talent Protocol and GitHub data, with disclosed credentials and external calls but no hidden execution or persistence.

Install only if you are comfortable letting the agent query Talent Protocol and GitHub for builder identity/profile data. Use a limited Talent API key, keep the optional GitHub token unscoped for public data, and avoid requesting earnings, memberships, wallets, or combined identity lookups unless needed for the task.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (43)

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 23)May include surrounding context.

md

| Variable | Required | Description | Get it at |
|----------|----------|-------------|-----------|
| `TALENT_API_KEY` | **Yes** | API key for Talent Protocol (read access to profile/identity data) | https://talent.app/~/settings/api |
| `GITHUB_TOKEN` | No | Personal access token for higher GitHub rate limits (60/hr → 5,000/hr) | https://github.com/settings/tokens |

**Base URL:** `https://api.talentprotocol.com`

Credential Access

High

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 127)May include surrounding context.

md

| Variable | Required | Description | Get it at |
|----------|----------|-------------|-----------|
| `TALENT_API_KEY` | **Yes** | API key for Talent Protocol (read access to profile/identity data) | https://talent.app/~/settings/api |
| `GITHUB_TOKEN` | No | Personal access token for higher GitHub rate limits (60/hr → 5,000/hr) | https://github.com/settings/tokens |

**Base URL:** `https://api.talentprotocol.com`

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 88)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 6)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 19)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 42)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 90)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 106)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 130)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 153)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 186)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 199)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/github-enrichment.md (reported line 14)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/use-cases.md (reported line 12)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/use-cases.md (reported line 17)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/use-cases.md (reported line 48)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/use-cases.md (reported line 63)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/use-cases.md (reported line 82)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/use-cases.md (reported line 132)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/use-cases.md (reported line 169)May include surrounding context.

API Key: https://talent.app/~/settings/api

bash

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 87)May include surrounding context.

USE POST with customQuery regex:

bash

curl -X POST -H "X-API-KEY: $TALENT_API_KEY" -H "Content-Type: application/json" \
  "https://api.talentprotocol.com/search/advanced/profiles" \
  -d '{
    "customQuery": {

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/endpoints.md (reported line 41)May include surrounding context.

USE POST with customQuery regex:

bash

curl -X POST -H "X-API-KEY: $TALENT_API_KEY" -H "Content-Type: application/json" \
  "https://api.talentprotocol.com/search/advanced/profiles" \
  -d '{
    "customQuery": {

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

This documentation instructs callers to retrieve linked accounts, social profiles, follower counts, earnings, memberships, and other profile attributes without any guidance on data minimization, consent, lawful basis, retention, or user notice. In a skill designed for identity resolution and enrichment, that omission increases the likelihood of privacy-invasive use and overcollection of personal data, even if the API itself is legitimate.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 120)May include surrounding context.

Profile

bash

curl https://api.github.com/users/{username}

json

Static analysis

No suspicious patterns detected.