Security audit

3X-UI代理面板

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent 3x-ui administration helper, but it exposes powerful panel operations and unsafe token handling without enough guardrails.

Review this skill before installing if the panel is production or shared. Use least-privilege, revocable API tokens where possible, avoid pasting live tokens into command lines or chat logs, and require explicit confirmation plus backups before using delete, reset, restart, import, update, or credential-management endpoints.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 88% confidence
Finding: The skill advertises shell-based workflow scripts and operational capabilities but does not declare permissions or safety boundaries. In an agent environment, this can cause hidden execution capability, making it easier to perform unintended local commands or automation against sensitive infrastructure without explicit user awareness.

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: This section documents highly destructive administrative actions such as stopping services, restarting components, importing databases, updating the panel, and modifying security-sensitive configuration without any warning, approval gate, or rollback guidance. In the context of a live proxy-management panel, these operations can cause outage, lockout, configuration corruption, or large-scale service disruption if invoked carelessly or by a prompt-influenced agent.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The authentication guidance instructs use of bearer tokens and session-cookie login flows but does not warn that these secrets grant administrative control over the 3x-ui panel. In practice, this increases the chance that users or downstream agents will expose tokens, passwords, or cookies in prompts, logs, scripts, or shared outputs, leading to panel compromise.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The script requires the bearer token to be passed as a positional command-line argument, which can expose the secret through shell history, process listings, audit logs, or job control tooling on multi-user systems. Because this skill manages a 3x-ui panel, disclosure of the token can enable unauthorized user creation, link retrieval, and broader administrative actions against the proxy infrastructure.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The script requires an authorization token as a positional command-line argument, which can expose credentials through shell history, process listings, audit logs, or orchestration tooling that records argv. In the context of a 3x-ui administration skill, this token likely grants sensitive panel access, so disclosure could enable unauthorized monitoring or configuration changes.

Static analysis

No suspicious patterns detected.