Security audit
Security checks for vulnerabilities and agentic risk
This skill is a legitimate accounting importer, but it exposes live accounting changes, company settings updates, mapping deletion, and import rollback without strong in-skill confirmation boundaries.
Install only if you are comfortable letting an agent operate against live accounting data through Synder. Use a limited/revocable API token, start with dryRun=true, review mappings and medium-confidence matches, and require explicit approval before dryRun=false imports, settings changes, mapping deletion, cancellation, or reversion.
The revert endpoint is a destructive capability that can delete entities previously created in the accounting system. Because the skill is positioned as an importer, exposing deletion behavior creates a high-risk mismatch where an agent or prompt injection could trigger irreversible accounting changes under the guise of import assistance.
The mapping deletion endpoint introduces a mutable administrative action that can be abused through overbroad tool access or parameter manipulation. Even as a soft delete, disabling mappings can disrupt established import workflows, cause operational failures, or force remapping in ways the user did not request.
### PUT /companies/{id}/mappings/{mid}
Same body as POST. Returns 200.
### DELETE /companies/{id}/mappings/{mid}
Soft delete (sets active=false). Returns 204.
### GET/POST /companies/{id}/settings
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl "$BASE/companies" -H "Authorization: Bearer $IMPORTER_API_TOKEN"
Response is an array. Pick the company with status: "ACTIVE". Save its id.
The API reference exposes capabilities that materially exceed the skill's declared import-only purpose, including account/company data retrieval, settings modification, mapping deletion, and import reversion. In an agent setting, this scope mismatch increases the chance that the skill can be invoked for unintended actions or data access beyond what a user expects from an importer.
The settings update endpoint allows modifying company-level import and accounting behavior, which is outside the narrow core workflow of uploading and processing a file. Misuse could silently alter future import semantics or accounting defaults, leading to integrity issues that are difficult to detect and recover from.
No suspicious patterns detected.