Landing Page Design

• Outcome: Review
• Latest audit: Sep 10, 2026 · 3:51 PM UTC
• Version: 0.1.5

Overview

This skill is mostly a landing-page design guide, but its setup instructions ask users to run mutable remote installers and unpinned skill installs that deserve review before use.

Review this before installing. The design advice itself is ordinary, but do not run the curl-to-sh installer or unpinned npx skill commands unless you trust the publisher and have verified the downloaded artifacts through a safer, pinned or checksum/signature-based process. Treat infsh prompts, generated assets, and search queries as data sent to external services.

A.I.G

Vulnerability Patterns

• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (2)

T03 · Remote Payload Retrieval and Execution

Error

• Location: SKILL.md:14

Finding

Unverified Remote Installation Script Executed Directly by a Shell

Content

View full analysis

Remediation

View remediation

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:238

Finding

Unpinned Third-Party Skill Installation Through Dynamic Package Tooling

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (7)

External Script Fetching

High

• Category: Supply Chain
• Confidence: 98% confidence

Finding

curl -fsSL https://cli.inference.sh | sh pipes remote content directly into a shell, which is a classic arbitrary code execution pattern. Even with claims about checksum verification, the bootstrap script itself is executed before independent verification by the user, so compromise of the host, CDN, DNS, TLS termination, or script publishing pipeline could lead to immediate code execution.

Content

Scanner excerpt · SKILL.md (reported line 14)May include surrounding context.

Quick Start

bash

curl -fsSL https://cli.inference.sh | sh && infsh login

# Generate a hero image
infsh app run falai/flux-dev-lora --input '{

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The manifest description lists triggers such as "landing page," "hero section," and especially "product page design," which are common design phrases and not narrowly scoped invocation conditions. The file does not provide constraints, exclusions, or negative examples clarifying when the skill should or should not activate.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

Granting broad Bash access (Bash(infsh *)) is more permission than a content/design guidance skill should generally require. Even if partially scoped to infsh, it still authorizes command execution paths that can reach external services and potentially process sensitive user data or trigger unintended actions.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The manifest describes a skill for landing page conversion optimization, layout rules, CTA psychology, and related design guidance. In the file, the skill also instructs users to install an external CLI, generate images with remote models, and research competitor pages through external search services, which goes beyond the narrow design-guidance description in the manifest.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 88% confidence

Finding

The skill recommends invoking npx skills add ... without pinning an exact package/version, which allows whatever the current published package resolves to at execution time. If the upstream package, dependency chain, or package owner is compromised, users may execute unexpected code during install/use.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 88% confidence

Finding

This npx skills add ... reference is unpinned, so it depends on the latest registry state rather than a reviewed artifact. That creates a supply-chain risk where a malicious or compromised release could run code in the user's environment.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 88% confidence

Finding

An unversioned npx install/use path is a real supply-chain exposure because package contents can change after the documentation is written. In a skill context, users may copy-paste the command directly, increasing the chance of executing unreviewed code.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.