Security audit

Cifer SDK

Security checks for vulnerabilities and agentic risk

Overview

This documentation-only skill is coherent, but it under-discloses that sensitive plaintext, files, and signer-backed operations are routed through a remote CIFER Blackbox service.

Review this skill carefully before installing or following its examples. Do not send regulated, proprietary, credential-bearing, or highly sensitive files/messages through the Blackbox service unless you accept that the remote service processes them. Use dedicated low-privilege keys or managed signers for server-side integrations, pin and review SDK versions, and require explicit user approval before uploading files or signing messages.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Error

Location: skill.md:47
Finding: Remote Encryption Workflow Exposes Plaintext Messages and Files to an External Service
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: skill.md:30
Finding: Unpinned Third-Party SDK Creates a Sensitive Supply-Chain Exposure
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The server-side examples normalize use of a raw private key from environment variables and then transmit plaintext or files to a remote Blackbox service without any explicit warning that sensitive content leaves the local trust boundary. In an agent skill context, this is risky because downstream users or autonomous agents may copy the pattern directly, handling credentials and confidential data in infrastructure they do not fully control.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.