T09 · Insecure Skill Coding Practices
Error
- Location
QUICK_START.md:27- Finding
Credential-Shaped E*TRADE API Key and Secret Committed to Documentation
- Content
View full analysis
- Remediation
View remediation
Security audit
Etrade Pelosi Bot
Security checks for vulnerabilities and agentic risk
Overview
This skill can place real brokerage trades and persist credentials locally, but its safeguards and disclosures are not strong enough for unattended financial automation.
Review carefully before installing. Use only sandbox or paper-trading credentials, rotate any exposed E*TRADE keys, avoid storing broker or Telegram secrets in this repo, disable cron/systemd/background execution until you have audited the exact commands, and do not enable production trading without explicit per-order approval and strict spending limits.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (3)
T09 · Insecure Skill Coding Practices
Error
- Location
src/config_loader.py:136- Finding
Brokerage and Telegram Credentials Persisted in Plaintext with Default File Permissions
- Content
View full analysis
- Remediation
View remediation
T08 · Insecure Dependencies
Warning
- Location
requirements.txt:5- Finding
Mutable and Unverified Third-Party Dependency Installation
- Content
View full analysis
=2.28.0 requests-oauthlib>=1.3.0 # PDF parsing for House disclosures pdfplumber>=0.9.0 # Web scraping for Senate beautifulsoup4>=4.11.0 selenium>=4.10.0 webdriver-manager>=4.0.0 # Data analysis & backtesting pandas>=1.5.0 yfinance>=0.2.0 # Scheduling schedule>=1.2.0 # Optional: Faster HTML parsing lxml>=4.9.0 # Testing pytest>=7.0.0 pytest-cov>=4.0.0 ``` Related installation commands include: ```bash pip install -r requirements.txt ``` and, in `final_setup.sh`: ```bash pip install -r src/requirements.txt pip install yfinance python-telegram-bot==20.7 selenium webdriver-manager ``` ### Technical Analysis The dependency manifest uses lower-bound constraints rather than exact reviewed versions. Installation can therefore select any future release satisfying each `>=` constraint. No hashes or signed lockfile are provided to verify package integrity. The setup process also installs additional packages directly, creating multiple dependency sources and reducing reproducibility. Packages such as `webdriver-manager` have substantial runtime behavior and may download browser-related components, which further increases supply-chain exposure. This does not prove that any current dependency is malicious. The vulnerability is that the effective installed code can change after the Skill has been reviewed, without any modification to the repository. ### Attack Path 1. An attacker compromises a maintainer account, package release process, dependency account, or package index. 2. The attacker publishes a malicious release with a version satisfying the project’s lower-bound constraint. 3. A user executes the documented setup or one of the installation scripts. 4. `pip` resolves and installs the malicious or compromised release because ...[truncated 910 chars]- Remediation
View remediation
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (209)
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
This summary promotes a fully automated system that pulls trading signals and executes broker trades on a cron schedule, but it does not provide an explicit warning that the workflow may place real-money orders if misconfigured or switched out of sandbox mode. In a financial-trading skill, that omission is dangerous because users may follow the quick-start path and enable unattended execution without fully understanding loss, brokerage, and automation risks.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The document explicitly describes automated broker execution driven by congressional trade data, but it does not warn users that running the skill may trigger real trading actions with financial consequences. In a trading context, omission of this warning is dangerous because users may enable or test the system without understanding that downstream integrations can place or influence live orders.
- Content
Intent-Code Divergence
High
- Category
- Not specified by scanner
- Confidence
- 99% confidence
- Finding
The documentation embeds what appear to be actual E*TRADE API credentials directly in a configuration example, which creates a real risk of credential exposure, unauthorized API access, and accidental reuse by readers. In a trading automation skill, exposed broker API material is especially sensitive because compromise could enable access to financial workflows, account data, or trade-related actions depending on the associated permissions.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 98% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 93% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 95% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 95% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 98% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 98% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 96% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 95% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 92% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 98% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 94% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 96% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 94% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 96% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 96% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 98% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 95% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 97% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 95% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 95% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 97% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 97% confidence
- Finding
The skill may primarily perform tracking, parsing, and testing rather than actual trade mirroring and controls. That gap is especially important given the financial domain and the implication of automated execution in the title and feature list.
- Content
Static analysis
No suspicious patterns detected.