Security audit

futurespro-panda

Security checks for vulnerabilities and agentic risk

Overview

This skill is a focused futures-data lookup helper, but it lets users redirect API calls to arbitrary addresses and uses insecure TLS options for financial-data requests.

Review this skill before installing. It appears intended to fetch futures-market reference data, but it should be changed to use a fixed trusted HTTPS hostname, remove curl -k, and disclose that query terms are sent to an external API. Do not use it with private endpoints, account-specific trading details, proprietary strategies, or sensitive internal network addresses unless the API origin is explicitly controlled and validated.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:52
Finding: TLS Certificate Verification Disabled for API Requests
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:14
Finding: User-Controlled API Origin Allows Unrestricted Outbound Requests
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The description says to invoke the skill whenever a user asks about futures fees, margins, special variety conditions, trading announcements, or calendar events. This covers a very wide range of ordinary financial questions and does not provide exclusion conditions or tighter context, increasing the risk of unintended invocation.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The skill instructs the agent to send user query terms to an external API over the network without any notice, consent, or data-minimization guidance. Users may provide sensitive trading interests, account-related context, or proprietary symbols, and the skill gives no warning before transmitting that data to a third-party endpoint.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill explicitly says that if the user specifies another API address, the agent should use that address instead of the default. That turns a narrowly scoped futures-data skill into an arbitrary outbound request primitive, which can be abused for SSRF-like access to internal services, cloud metadata endpoints, or other unintended network targets if the runtime has network reachability.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.