Security audit

taohopdong

Security checks for vulnerabilities and agentic risk

Overview

The skill performs the advertised tax lookup and Sheet update, but it also automatically writes persistent Odoo CRM records with limited disclosure and no confirmation step.

Review this skill before installing. It may update a Google Sheet and automatically create Odoo customer and opportunity records; use only with least-privilege Google and Odoo accounts, confirm intended CRM behavior with the publisher, and prefer a version that previews and asks permission before any Odoo write.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:128
Finding: Potential Shell Command Injection Through Unsafe JSON Argument Construction
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:147
Finding: Undisclosed Automatic Creation of Persistent Odoo CRM Records
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Description-Behavior Mismatch

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill manifest describes tax lookup and writing contract data to a Google Sheet, but the body silently adds automatic creation of Odoo customer and CRM opportunity records. This is a scope expansion into a separate system of record with business side effects, so a user asking only for lookup/sheet entry could unintentionally trigger persistent CRM changes.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

High

Category: Not specified by scanner
Confidence: 95% confidence
Finding: Automatic creation of res.partner and crm.lead records is not necessary for the stated task of company lookup and sheet population, making it an unjustified side effect. Such hidden writes can pollute CRM data, create false pipeline entries, and expose the organization to operational abuse if an attacker or mistaken user feeds arbitrary inputs.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill instructs the agent to automatically create Odoo customer and opportunity records without warning the user or asking for confirmation. Because these are state-changing actions in a business system, the lack of notice increases the risk of unauthorized or accidental data creation and reduces the user's ability to control downstream effects.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.