Security audit

Domain Details

Security checks for vulnerabilities and agentic risk

Overview

The skill is a small, coherent domain lookup guide, with one optional unpinned npx command users should treat cautiously.

Use the documented curl API examples when possible. If you choose the optional CLI, understand that npx may fetch and run external npm code with your user permissions; pin a trusted version and avoid running it in sensitive environments unless you have verified the package.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:31
Finding: Unpinned Third-Party Package Execution Through npx
Content: View full analysis
Remediation: View remediation
domaindetails example.com ``` 2. Verify the pinned release's provenance, publisher identity, repository, and package contents before recommending it. 3. Prefer installing dependencies through a project manifest and committed lockfile rather than downloading and executing the latest release on demand. 4. Use npm integrity and provenance verification where supported, and monitor the package for publisher or ownership changes. 5. Configure automation to reject unexpected package versions and registry sources. 6. Prefer the documented HTTPS API examples when local third-party code execution is unnecessary. 7. Clearly disclose that `npx` may download and execute external code with the invoking user's permissions. ]]>

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.