Allstar Link node control ASL3 (ASL3 Node Control)

• Outcome: Review
• Latest audit: Jul 10, 2026 · 3:42 AM UTC
• Version: 0.1.0

Overview

This skill mostly matches its radio-node control purpose, but one shell helper can send API-key-authenticated commands to an undocumented default IP address if the user has not set their own target.

Install only if you intend to let the agent control live AllStar Link node connections. Set ASL_PI_IP or ASL_API_BASE explicitly before use, review or remove the shell helper's default IP, protect and rotate ASL_API_KEY as needed, prefer a trusted tunnel such as Tailscale or HTTPS-capable endpoint, and be cautious with aliases or cron-based net tick because they can trigger later connect/disconnect actions.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 89% confidence
• Finding: The skill documentation describes use of environment variables, local state files, shell execution, and network access, but the metadata does not declare explicit permissions for those capabilities. This creates a trust and review gap: an operator may approve the skill without realizing it can read secrets, write persistent files, and issue remote control actions against a radio node over the network.

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The aliases on these lines include broad natural-language triggers like "drop in" that can plausibly appear in ordinary conversation, making accidental activation or incorrect node selection more likely. In a skill that controls amateur radio nodes via REST API, ambiguous aliases can cause unintended connections or control actions against the wrong target.

Vague Triggers

Low

• Confidence: 84% confidence
• Finding: The alias "parrot" is a common word and may be matched from normal user speech rather than deliberate node selection. Because this skill is used to monitor and control AllStar Link nodes, such collisions can lead to accidental operations on node 55553, though the impact is limited to misrouting or unintended control rather than direct code execution.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The client constructs the default API base as plain HTTP and sends the X-API-Key header over that channel, which exposes credentials and request contents to interception or modification by any party on the network path. In a tool that can monitor and control amateur radio nodes, a stolen key could permit unauthorized status access and node connect/disconnect actions.

External Transmission

Medium

• Category: Data Exfiltration

Content

fi

    if [ -n "$body" ]; then
        curl -s -X "$method" -H "X-API-Key: $ASL_API_KEY" -H "Content-Type: application/json" -d "$body" "${ASL_BASE}${endpoint}"
    else
        curl -s -X "$method" -H "X-API-Key: $ASL_API_KEY" "${ASL_BASE}${endpoint}"
    fi

• Confidence: 95% confidence
• Finding: curl -s -X "$method" -H "X-API-Key: $ASL_API_KEY" -H "Content-Type: application/json" -d

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.