Security audit

builder-data

Security checks for vulnerabilities and agentic risk

Overview

This skill is a documented guide for querying Talent Protocol and GitHub public/profile data, with no hidden code, persistence, or destructive behavior found.

Install only if you intend to let the agent query Talent Protocol and GitHub for builder profile, identity, wallet, social, and credential data. Use narrowly scoped API keys, avoid unnecessary bulk identity linking, and only request personal or reputation data for legitimate, authorized purposes.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (45)

Credential Access

High

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
Content: Scanner excerpt · SKILL.md (reported line 23)May include surrounding context.
md
| Variable | Required | Description | Get it at | |----------|----------|-------------|-----------| | `TALENT_API_KEY` | **Yes** | API key for Talent Protocol (read access to profile/identity data) | https://talent.app/~/settings/api | | `GITHUB_TOKEN` | No | Personal access token for higher GitHub rate limits (60/hr → 5,000/hr) | https://github.com/settings/tokens | **Base URL:** `https://api.talentprotocol.com`

Credential Access

High

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
Content: Scanner excerpt · SKILL.md (reported line 127)May include surrounding context.
md
| Variable | Required | Description | Get it at | |----------|----------|-------------|-----------| | `TALENT_API_KEY` | **Yes** | API key for Talent Protocol (read access to profile/identity data) | https://talent.app/~/settings/api | | `GITHUB_TOKEN` | No | Personal access token for higher GitHub rate limits (60/hr → 5,000/hr) | https://github.com/settings/tokens | **Base URL:** `https://api.talentprotocol.com`

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 88)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/endpoints.md (reported line 6)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/endpoints.md (reported line 19)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/endpoints.md (reported line 42)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/endpoints.md (reported line 90)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/endpoints.md (reported line 106)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/endpoints.md (reported line 130)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/endpoints.md (reported line 153)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/endpoints.md (reported line 186)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/endpoints.md (reported line 199)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/github-enrichment.md (reported line 14)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/use-cases.md (reported line 12)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/use-cases.md (reported line 17)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/use-cases.md (reported line 48)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/use-cases.md (reported line 63)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/use-cases.md (reported line 82)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/use-cases.md (reported line 132)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/use-cases.md (reported line 169)May include surrounding context.
API Key: https://talent.app/~/settings/api

bash
curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

URL Encoding: [ = %5B, ] = %5D

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 87)May include surrounding context.
USE POST with customQuery regex:

bash
curl -X POST -H "X-API-KEY: $TALENT_API_KEY" -H "Content-Type: application/json" \ "https://api.talentprotocol.com/search/advanced/profiles" \ -d '{ "customQuery": {

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/endpoints.md (reported line 41)May include surrounding context.
USE POST with customQuery regex:

bash
curl -X POST -H "X-API-KEY: $TALENT_API_KEY" -H "Content-Type: application/json" \ "https://api.talentprotocol.com/search/advanced/profiles" \ -d '{ "customQuery": {

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The documentation instructs use of endpoints that retrieve personal profile, social, identity-linkage, and credential data without any privacy warning, purpose limitation, or guidance on consent and minimization. In an agent skill, this increases the chance the tool will be used for bulk profiling, deanonymization, or unnecessary collection of sensitive personal data.
Content: No source excerpt is available for this finding.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 120)May include surrounding context.
Profile

bash
curl https://api.github.com/users/{username}

json

Overview

A.I.G

SkillSpector

Credential Access

Credential Access

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

Missing User Warnings

External Transmission

Profile