Security audit

last30days

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to implement a legitimate multi-source research tool, but its declared metadata (no required env, no required binaries, no install) does not match the actual instructions and code which expect many API keys, local files, and platform binaries — this mismatch is concerning and needs user review before installing.

This skill includes substantial runnable code and persistent storage but the registry metadata (no required env vars or binaries; no install) does not reflect that. Before installing or providing credentials: 1) Inspect and run the built-in diagnostic: python3 <skill_root>/scripts/last30days.py --diagnose to see which sources require keys and which binaries are missing. 2) Do NOT paste account tokens (AUTH_TOKEN/CT0 or others) unless you understand the risk — X tokens can grant access to your account data. Prefer read-only or scoped keys where possible. 3) If you want to try safely, run the scripts in an isolated environment (container or throwaway VM) and avoid writing secrets to ~/.config until satisfied. 4) Verify required binaries (node, yt-dlp) are acceptable to install on your system — node is required to run the vendored bird-search module. 5) Be cautious about enabling cron/automatic runs or running the setup/device-auth flows; those will persist configuration and may schedule recurring networked activity. 6) If you plan to use the skill, consider limiting credential scope, reviewing the vendored JS (bird-search.mjs), and confirming which backend (ScrapeCreators vs OpenAI/Perplexity/OpenRouter) the current variant actually uses (there are conflicting references).

Static analysis

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: scripts/lib/vendor/bird-search/lib/runtime-query-ids.js:50

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: scripts/lib/vendor/bird-search/lib/twitter-client-base.js:38

File read combined with network send (possible exfiltration).

Warn

Code: suspicious.potential_exfiltration
Location: scripts/lib/vendor/bird-search/lib/runtime-query-ids.js:1