T09 · Insecure Skill Coding Practices
Error
- Location
SKILL.md:41- Finding
Command Injection Through Unsafely Interpolated Prospect Input
- Content
View full analysis
- Remediation
View remediation
Security audit
Prospect Enrichment
Security checks for vulnerabilities and agentic risk
Overview
The skill has a legitimate company-research purpose, but its command examples put user-provided company names and URLs directly into shell commands and it does not clearly warn users before sending prospect data to external services.
Review this skill before installing. It is suitable for prospect research, but users should avoid running it on confidential or non-public prospect lists without authorization, and maintainers should add explicit consent, input validation, and safe CLI invocation guidance before agents execute the Firecrawl or Exa commands.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The skill description contains very broad trigger phrases such as 'learn about a company,' 'what does this company do,' and 'company deep dive,' which can match many ordinary business requests and cause the agent to invoke this skill unexpectedly. Because the skill performs website scraping and external searches, over-broad routing can lead to unintended data collection, unnecessary third-party disclosure of user-provided targets, and actions beyond what the user explicitly requested.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The skill instructs the agent to scrape a prospect website and perform external web searches without any explicit warning, consent check, or notice that company names and URLs may be sent to third-party tools. This creates a privacy and data-governance risk because users may provide sensitive prospect lists, internal targets, or non-public context, and the skill defaults into transmitting that information externally.
- Content
Static analysis
No suspicious patterns detected.