Surge Download Manager

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 4:12 AM UTC
• Version: 1.1.0

Overview

This skill is a straightforward Surge download-manager helper, with expected download, file-write, and optional server-mode behavior disclosed in its instructions.

Install only if you trust the Surge project and its distribution channels. Prefer a pinned release or verified binary, be careful with download URLs and output paths, and start server or remote-token mode only when you intend to leave a download service running.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:34

Finding

Unpinned Third-Party Executable Installation

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Behavioral AST: exec() Call, eval() Call, Dynamic Import
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The skill instructs users how to download remote content, run a headless daemon, and write files to disk, but it does not prominently warn about these side effects or the trust implications of downloading unverified files. Because the skill also documents remote control via host/token, missing warnings can lead to unsafe use, accidental background processes, or downloading malicious content without sufficient user awareness.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The activation criteria are broad enough that the skill may trigger for general download-related requests without clearly constraining when it should be used. In a tool that performs network access, writes files, and can start a background server, over-broad activation increases the chance of unintended execution or suggestion of risky actions in contexts where the user did not explicitly ask for them.

Content

No source excerpt is available for this finding.

subprocess module call

Medium

• Category: Dangerous Code Execution
• Confidence: 70% confidence

Finding

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

Content

Scanner excerpt · scripts/surge.py (reported line 11)May include surrounding context.

python

def run_surge(args_list):
    """Run surge command"""
    result = subprocess.run(['surge'] + args_list, capture_output=True, text=True)
    return result.returncode, result.stdout, result.stderr

def start_server(output_dir=None):

subprocess module call

Medium

• Category: Dangerous Code Execution
• Confidence: 70% confidence

Finding

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

Content

Scanner excerpt · scripts/surge.py (reported line 21)May include surrounding context.

python

cmd.extend(['-o', output_dir])
    
    print(f"⚡ Starting Surge server...")
    proc = subprocess.Popen(cmd)
    return proc

def main():