T08 · Insecure Dependencies
Error
- Location
SKILL.md:5- Finding
Unpinned Executable Dependency Installed from a Mutable Git Repository
- Content
View full analysis
- Remediation
View remediation
Security audit
Printer Ai
Security checks for vulnerabilities and agentic risk
Overview
The skill is a coherent local-printer tool, but it installs an unpinned executable from GitHub and includes physical print/cancel actions without clear confirmation guidance.
Review this before installing. Prefer a pinned commit or versioned release of the printer-ai package, and only allow the agent to print or cancel jobs after you confirm the file, printer, options, and job ID. Avoid sending sensitive documents to shared or unattended printers.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 81% confidence
- Finding
SQP-3 applies to all file types and covers language or locale policy violations. These lines include Chinese text embedded in otherwise English instructions, but the document does not say that multilingual output is optional or selected by the user.
- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The skill enables actions that can cause immediate real-world side effects: printing can waste paper/ink or disclose sensitive documents, and cancel-job can interrupt active work. While the commands are legitimate for a printer-management skill, the documentation does not explicitly warn that these operations should only be performed with clear user confirmation, which increases the risk of unintended physical output or job disruption by an agent.
- Content