Image Upscaling

• Outcome: Review
• Latest audit: Sep 10, 2026 · 10:35 AM UTC
• Version: 0.1.5

Overview

The skill is for image upscaling, but its setup instructions ask users to run mutable remote installer and package-install commands that should be reviewed before use.

Review the installer and any related skills before running them. Prefer a pinned, manually downloaded, checksum-verified CLI install path, run login separately, and avoid the optional npx skill-add commands unless you trust and have reviewed those packages.

A.I.G

Vulnerability Patterns

• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (2)

T03 · Remote Payload Retrieval and Execution

Error

• Location: SKILL.md:16

Finding

Unverified Remote Installer Executed Directly in a Shell

Content

View full analysis

Remediation

View remediation

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:62

Finding

Mutable Third-Party Skill Dependencies Installed Through npx

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (6)

External Script Fetching

High

• Category: Supply Chain
• Confidence: 97% confidence

Finding

curl -fsSL https://cli.inference.sh | sh pipes a remotely fetched script directly into a shell, enabling arbitrary code execution if the server, CDN, DNS, TLS trust chain, or publishing pipeline is compromised. Although the surrounding text claims checksum verification and no elevated permissions, those assurances are themselves untrusted documentation and do not remove the core risk of executing a mutable remote script.

Content

Scanner excerpt · SKILL.md (reported line 16)May include surrounding context.

Quick Start

bash

curl -fsSL https://cli.inference.sh | sh && infsh login

infsh app run infsh/real-esrgan --input '{"image_url": "https://your-image.jpg"}'

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The trigger list includes broad phrases such as enhance image, higher resolution, and image enhancement, which are common user intents and can cause the skill to activate unexpectedly. Over-broad invocation increases the chance that users are steered into running the skill's shell-based workflows, including remote install commands, in contexts where they did not explicitly request this tool.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 88% confidence

Finding

The skill recommends executing npx skills add ... without pinning an exact package version, which allows retrieval of whatever version is current at execution time. If the upstream package is compromised or a breaking/malicious release is published, users may install and run unreviewed code.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 88% confidence

Finding

This npx skills add ... command is unpinned, so it resolves to the latest published package at runtime rather than a reviewed version. That creates a software supply-chain risk: future package compromise or namespace abuse could lead to arbitrary code execution on the user's machine.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 88% confidence

Finding

The example uses npx skills without version pinning, making execution dependent on the current registry state. In documentation intended for end users, this is dangerous because it normalizes running mutable remote package code directly from the package registry.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 88% confidence

Finding

An unpinned npx skills add ... command introduces a supply-chain risk because users cannot know in advance which package contents will be executed. In the context of a skill file that may be copied verbatim, this can directly expose users to malicious package updates.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.