Security audit

ragora

Security checks for vulnerabilities and agentic risk

Overview

The skill is a disclosed Ragora integration guide that uses a user-provided API key to search Ragora knowledge bases and does not show hidden or unrelated behavior.

Install this only if you intend to let your agent send search queries and related retrieval requests to Ragora using your RAGORA_API_KEY. Keep the key in an environment variable or secret manager, monitor credit usage for marketplace collections, and do not use it for collections containing data you do not want processed by Ragora.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (27)

MCP Config Access

High

Category: Agent Snooping
Confidence: 80% confidence
Finding: Skill accesses MCP server configuration files (mcp.json). MCP configs contain server URLs, authentication tokens, and tool definitions — reading them allows the skill to discover and potentially abuse other tool integrations.
Content: Scanner excerpt · README.md (reported line 126)May include surrounding context.
md
| `POST` | `/v1/collections/{slug}/topic` | Get topic from a collection | | `GET` | `/v1/collections/{slug}/versions` | List versions | | `GET` | `/v1/billing/balance` | Check credit balance | | `GET` | `/v1/mcp/manifest` | List available MCP tools | | `POST` | `/v1/mcp/execute` | Execute any MCP tool via REST | All REST endpoints use base URL `https://api.ragora.app` and require `Authorization: Bearer <RAGORA_API_KEY>`.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 119)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 146)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 152)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 219)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 227)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 255)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 293)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 315)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 345)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 363)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 383)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 389)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 601)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 606)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 612)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 657)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 670)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 689)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 708)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 723)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 744)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 759)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 776)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 782)May include surrounding context.
md
### REST API base URL - **Base**: `https://api.ragora.app/v1` - **Auth header**: `Authorization: Bearer <RAGORA_API_KEY>` - **Content-Type**: `application/json` for all POST/PUT requests.

Static analysis

No suspicious patterns detected.