Security audit

AniList CLI

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent AniList CLI wrapper, with ordinary credential and third-party install risks users should handle carefully.

Before installing, confirm you trust the npm package and consider pinning the CLI version. Treat the AniList token like a password: do not paste it into shared chats, logs, commits, or visible terminal history, and only allow write actions when you explicitly want the agent to update your AniList account.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:9
Finding: Unpinned Global Installation of a Third-Party npm Package
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill instructs users or agents to set an AniList auth token but does not explicitly identify the token as sensitive secret material or warn against exposing it in logs, shell history, transcripts, or shared outputs. In an agent-executed CLI context, this is dangerous because commands may be echoed, stored, or observed by other systems, leading to credential leakage and unauthorized access to the user's AniList account.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.