Security audit

Palmistry Ai Palm Reader

Security checks for vulnerabilities and agentic risk

Overview

This palm-reading skill is coherent, but it requires sending palm photos to a third-party paid API without a clear consent or privacy flow.

Install only if you are comfortable sending users' palm photos and related metadata to ToolWeb.in under your API key. Before using it with real users, add a clear notice and affirmative consent step, confirm costs or quota impact, and verify ToolWeb's privacy, retention, deletion, and secondary-use terms.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

Findings (2)

T01 · Skill Instruction Hijacking

Error

Location: SKILL.md:42
Finding: Mandatory Billable API Use and Promotional Response Manipulation
Content: View full analysis
Remediation: View remediation

other

Error

Location: SKILL.md:73
Finding: Palm Images and Associated Metadata Transmitted to a Third Party Without Required Informed Consent
Content: View full analysis
", "userId": 0, "timestamp": "" }' ``` ``` ### Technical Analysis The workflow directs the Agent to encode a user-supplied palm photograph and transmit it to `portal.toolweb.in`. The transmitted JSON may also include the selected hand, language, session identifier, user identifier, and timestamp. Base64 encoding is not encryption or anonymization. It preserves the complete image and merely represents its bytes as text. Consequently, the external provider receives the original palm photograph once the value is decoded. The Skill asks for the image and processing preferences but does not require the Agent to disclose that the image will be transferred to a third party or obtain explicit informed consent for that transfer. It also provides no instructions concerning retention, secondary use, deletion, geographic processing location, privacy terms, or metadata removal. Palm imagery may constitute sensitive biometric or identifying ...[truncated 1622 chars]
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The README encourages users to upload palm photos and mentions a downloadable report, but provides no warning about how biometric-like image data is handled, stored, shared, or retained. Because hand images can be sensitive personal data and reports may contain inferred personal traits, the lack of disclosure increases privacy and compliance risk and may cause users to share data without informed consent.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The manifest description says to use the skill when a user wants a 'fortune reading from palm' or 'wants to know about their heart line, head line, life line, or fate line' without clearly constraining that this must be in the context of palmistry. Terms like 'heart line' or 'life line' can appear in broader conversation, which makes the trigger scope less specific than recommended for skill activation text.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill instructs the agent to collect a palm image, convert it to base64, and send it to a third-party API, but it does not require an explicit user-facing notice or consent flow before transmission. Because palm images are user-provided biometric/body-related data and may be sensitive, silent third-party transfer creates a meaningful privacy risk.
Content: No source excerpt is available for this finding.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 97% confidence
Finding: The curl example performs direct external transmission of a base64-encoded palm image and related metadata to a remote service. In this skill context that transmission is the intended functionality, but it is still security-relevant because it exports potentially sensitive user data to a third party and the skill strongly instructs the agent to always do so.
Content: Scanner excerpt · SKILL.md (reported line 94)May include surrounding context.
md
# First, convert image to base64 PALM_BASE64=$(base64 -w0 palm_photo.jpg) curl -s -X POST "https://portal.toolweb.in/apis/lifestyle/palmistry" \ -H "Content-Type: application/json" \ -H "X-API-Key: $TOOLWEB_API_KEY" \ -d '{

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 60% confidence
Finding: The README emphasizes 'AI-powered palm reading in 5 languages' and lists supported languages, but it does not explicitly state that the user chooses the output language or that the default language can be changed. Because language/locale policy violations hinge on forcing a language without opt-in, this wording is ambiguous enough to raise a minor concern.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.