T08 · Insecure Dependencies
Warning
- Location
SKILL.md:25- Finding
Unpinned Third-Party Python Packages Installed from the Default Package Index
- Content
View full analysis
- Remediation
View remediation
Security audit
Rdk X5 Ai Detect
Security checks for vulnerabilities and agentic risk
Overview
This skill mostly fits RDK X5 AI inference, but it includes broader streaming workflows and an unsafe RTSP credential example users could copy.
Review this skill before installing. Avoid copying the RTSP credential example with real credentials; use a protected config or secret source, a read-only camera account, and encrypted or isolated transport where possible. Pin and verify Python packages before installing, and be aware the workflows may access camera, audio, or RTSP streams and expose a local web viewer on port 8000.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)
T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:101- Finding
RTSP Credentials Exposed in Command-Line Arguments and Plaintext Transport
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)
Description-Behavior Mismatch
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The manifest positions the skill as single AI inference and explicitly directs users away from integrated camera+AI+output pipeline use cases. The websocket launch plus live overlay visualization at
http://<RDK_IP>:8000adds output serving and visualization pipeline behavior beyond merely running one inference algorithm.- Content
Description-Behavior Mismatch
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The manifest frames this skill as running a single AI algorithm on RDK X5, explicitly excluding camera setup, multimedia workflows, integrated camera+AI+output pipelines, and external-service bridging. The RTSP client instructions introduce network video ingestion and an end-to-end streaming inference scenario, which is materially broader than the declared scope and resembles a pipeline/integration capability rather than a single-model invocation detail.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The RTSP example embeds plaintext credentials directly in the connection URL, normalizing unsafe secret handling and increasing the chance users will hardcode real usernames and passwords into shell history, logs, screenshots, and documentation. In an edge-device/network-camera context, this can lead to credential leakage and unauthorized access to camera feeds or adjacent systems.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 77% confidence
- Finding
The skill description presents core operational guidance in a mixed Chinese/English form, and the document body is primarily Chinese, which can impose a language expectation on users without explicit opt-in. Under the language policy rule, locale or language constraints should be offered as a choice or clearly justified.
- Content