Security audit

EasyClass Auto-Improve

Security checks for vulnerabilities and agentic risk

Overview

The skill is not clearly malicious, but it tells an agent to automatically reset, edit, push, and possibly deploy code without enough safeguards.

Install only in a disposable or well-protected repository, preferably on a dedicated branch or isolated worktree with limited credentials. Do not give it production deployment credentials or direct protected-branch push rights unless you add explicit approval, backup, and review gates.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:38
Finding: Destructive Git Synchronization Can Erase Local Work
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Error

Location: SKILL.md:43
Finding: Automated Push and Deployment Lack Explicit Authorization Boundaries
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The workflow explicitly instructs a forced sync using git fetch + reset --hard + pull, which can discard local uncommitted changes and overwrite user work. In an automated skill that runs periodically, this is especially dangerous because it normalizes destructive repository operations without any explicit warning, confirmation, backup, or safety check.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The skill body is written entirely in Chinese and does not indicate that the user can choose another language or locale. This creates a language-policy concern because it implicitly constrains usage to a specific language without opt-in.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 86% confidence
Finding: The skill states it will read and update TASKS.md as part of normal operation but does not clearly warn users that their project files will be modified automatically. In a recurring automation context, silent file modification can lead to unintended edits, workflow corruption, or loss of user trust, especially if the board format differs from expectations.
Content: No source excerpt is available for this finding.