Security audit

Imgae Convert Skill

Security checks for vulnerabilities and agentic risk

Overview

This image conversion skill is purpose-aligned and disclosed, with ordinary local file-output risks users should manage.

Install Pillow in a virtual environment and consider pinning its version. When converting directories, choose an output directory outside the input directory to avoid recursive file generation and disk usage growth.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:11
Finding: Unpinned Pillow Dependency Allows Unreviewed Supply-Chain Changes
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/convert.py:579
Finding: Nested Output Directory Can Cause Recursive File Generation and Resource Exhaustion
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The manifest description and most of the instructional content are written in Chinese, while the file does not state that the skill is region-specific or provide an opt-in language choice. This can violate a language/locale policy when users are not given a choice of language.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The top-level docstring states "Convert various image formats to WebP," which describes a narrower behavior than the code actually implements. The rest of the file supports conversion among JPEG, PNG, WebP, GIF, BMP, and TIFF via --to-format and also supports keeping the original format with --compress, so the documentation actively misstates the tool's behavior.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.