T05 · Unauthorized Access and Privilege Escalation
Error
- Location
openapi.json:31- Finding
Unrestricted Cyber-Attack Simulation Against Arbitrary Targets
- Content
View full analysis
- Remediation
View remediation
Security audit
Cyber Attack Simulation
Security checks for vulnerabilities and agentic risk
Overview
This skill exposes cyber attack simulation against caller-specified targets but does not clearly constrain use to authorized, verified, low-risk environments.
Install only if you have a clear governance process for authorized security testing. Before using it, confirm targets are owned or explicitly approved, avoid production or third-party systems unless separately authorized, and treat any submitted target, user, session, and simulation data as shared with the external provider.
Vulnerability Patterns
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)
Natural-Language Policy Violations
High
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The API metadata markets the skill as a 'Professional Security Testing and Vulnerability Assessment' tool while exposing 'cyber attack simulation' functionality without any stated defensive-only limitation, consent requirement, or safe-use boundary. This materially increases the risk that integrators or agents will treat offensive operations as intended behavior and invoke them in unsafe or unauthorized contexts.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill explicitly supports phishing simulations yet provides no privacy, consent, or employee-notification guidance for human-targeted exercises. That omission can enable collection or misuse of personal or organizational communications data and encourage deceptive campaigns without appropriate approvals or governance.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The skill exposes functionality to run phishing, SQL injection, DDoS, brute-force, and similar attack simulations but does not prominently warn users about authorization, scope restriction, or the risk of service disruption. In a security-testing skill, omission of explicit safety and legal-use guardrails materially increases the chance the capability is used against unauthorized or production targets.
- Content
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 50% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
md ## References - **Kong Route:** https://api.mkkpro.com/security/cyber-attack-simulation - **API Documentation:** https://api.mkkpro.com:8120/docs
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
The POST endpoint exposes a generic 'Run Cyber Simulation' capability with no documented scope restrictions, authorization model, target ownership checks, or safety guardrails. In a skill explicitly framed around cyber attack simulation, this ambiguity can enable misuse against real third-party systems because consumers are not constrained to sandboxed, consented, or self-owned targets.
- Content