Security audit

Agent Api Stability Sentinel

Security checks for vulnerabilities and agentic risk

Overview

The skill is an API compatibility tester, but it pushes agents to run live requests with real payloads without enough safety boundaries for production or sensitive systems.

Review this skill before installing if you work with production, third-party, financial, account, notification, or customer-data APIs. Only use it with explicit authorization, scoped hosts and methods, safe test credentials, synthetic or redacted payloads, conservative request limits, and separate approval for any state-changing or destructive endpoint.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:37
Finding: Unbounded Live API Testing Against Unverified Targets
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill explicitly requires making actual HTTP requests to all modified endpoints with real payloads, but provides no safety boundaries such as requiring staging environments, read-only checks, non-production credentials, rate limiting, or protections for sensitive data. In an agent context, this can drive unintended interaction with production systems, mutate live data, leak secrets or personal data, and cause availability or compliance issues even if the intent is routine API validation.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.