Book Cover Design

• Outcome: Review
• Latest audit: Sep 10, 2026 · 3:51 PM UTC
• Version: 0.1.5

Overview

The skill is mostly coherent for AI-assisted book cover design, but it asks users to run mutable remote installers that can execute code or install unreviewed skills.

Review before installing. The design guidance is normal for this purpose, but avoid copying the curl-to-sh installer or unpinned npx skill-install commands unless you trust the publisher and have an independently verified version, checksum, or signature. Do not submit confidential manuscript details, unpublished artwork, or sensitive personal images to the external AI services without reviewing their data handling terms.

A.I.G

Vulnerability Patterns

• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (2)

T03 · Remote Payload Retrieval and Execution

Error

• Location: SKILL.md:14

Finding

Mutable Remote Installer Is Piped Directly into a Shell

Content

View full analysis

Remediation

View remediation

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:212

Finding

Unpinned Third-Party Skills Are Installed Through npx

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (7)

External Script Fetching

High

• Category: Supply Chain
• Confidence: 98% confidence

Finding

curl -fsSL https://cli.inference.sh | sh fetches remote content and immediately executes it in the shell, which is a classic high-risk pattern. If the remote host, delivery path, DNS, TLS termination, or upstream publishing process is compromised, arbitrary code can run on the user's machine with the user's privileges.

Content

Scanner excerpt · SKILL.md (reported line 14)May include surrounding context.

Quick Start

bash

curl -fsSL https://cli.inference.sh | sh && infsh login

# Generate a thriller cover concept
infsh app run falai/flux-dev-lora --input '{

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The manifest description advertises triggers such as "book cover" and especially "cover design," which are broad natural-language phrases without constraints or exclusion conditions. In a skill-routing context, this can cause unintended invocation for general design discussions rather than explicit requests for this specific workflow.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The skill requests broad Bash(infsh *) access even though its purpose is mainly design guidance and invoking a specific CLI. Granting shell capability beyond the minimum required increases the blast radius if the skill is misused, modified, or if command inputs become attacker-controlled.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The examples send prompts and, later in the skill, local image files to external AI services without a prominent privacy/data-handling warning. Users may unknowingly transmit sensitive manuscript concepts, proprietary artwork, or personal data to third-party services with different retention and training policies.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 89% confidence

Finding

The skill recommends npx skills add ... without pinning an exact package version or commit, so execution depends on whatever package state is current at install time. That creates a supply-chain risk: a compromised publisher account, dependency, or future malicious release could cause users to install and run unintended code.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 89% confidence

Finding

This npx skills add ... invocation is unpinned, which means users may fetch and execute a moving target rather than a reviewed artifact. In a skill file, that is especially risky because users may trust the instruction and run it directly, enabling supply-chain compromise if the referenced package changes.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 89% confidence

Finding

Referencing npx skills without version pinning exposes users to unreviewed future changes in the package and its dependency chain. Even if the current package is safe, later updates or account compromise could turn this command into arbitrary code execution on the user's system.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.