Security checks for vulnerabilities and agentic risk
Overview
The skill is purpose-aligned, but it asks users to install and run an unverified native agent binary that can change over time.
Review this carefully before installing. The service design requires trusting a local native agent with your yourbro token, local page files, and a persistent database. The install should ideally use pinned versions with published checksums or signatures, and users should avoid running the agent with broader filesystem or environment access than needed.
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
Content
Scanner excerpt · SKILL.md (reported line 309)May include surrounding context.
Delete a page
bash
rm -rf /data/yourbro/pages/hello/
List pages
Tool Parameter Abuse
High
Category
Tool Misuse
Confidence
90% confidence
Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
Content
Scanner excerpt · SKILL.md (reported line 309)May include surrounding context.
Delete a page
bash
rm -rf /data/yourbro/pages/hello/
List pages
Session Persistence
Medium
Category
Rogue Agent
Confidence
75% confidence
Finding
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
Content
Scanner excerpt · SKILL.md (reported line 91)May include surrounding context.
md
No ports to open. No domain name needed. Works behind NAT/firewalls.
To run as a background service, see `contrib/yourbro-agent.service` (Linux systemd) or `contrib/com.yourbro.agent.plist` (macOS launchd).
### 3. Pair your agent
External Transmission
Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content
Scanner excerpt · SKILL.md (reported line 201)May include surrounding context.
Find the agent ID: List the user's agents to get the agent ID:
bash
The markdown explicitly instructs deleting a page with rm -rf /data/yourbro/pages/hello/, which is an irreversible file deletion affecting published content. The skill does not provide any cautionary note, confirmation step, or warning about permanent removal and immediate impact on availability.
