Security audit

ILA Labor Signal

Security checks for vulnerabilities and agentic risk

Overview

This skill provides a paid logistics signal, but it requires an EVM private key and can automatically trigger a higher paid tier without clearly documented limits or confirmation.

Review before installing. Use only a dedicated low-balance wallet for this skill, avoid primary wallets, set external spending limits where possible, and confirm that the runtime validates recipient, network, token, amount, and retry behavior before exposing any private key.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:6
Finding: Overprivileged EVM Private Key Requirement
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:81
Finding: Automatic Server-Influenced Payment Tier Escalation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The skill metadata declares that use of the service requires an EVM private key for x402/Base mainnet micropayments, but the user-facing description and usage instructions do not clearly warn about that sensitive credential dependency. This can mislead operators or downstream agents into attaching a blockchain signing key without informed consent, increasing the chance of unnecessary secret exposure or unsafe key handling in automation.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.