Youtube Thumbnail Design

• Outcome: Review
• Latest audit: Sep 10, 2026 · 3:49 PM UTC
• Version: 0.1.5

Overview

This skill provides relevant thumbnail guidance, but it asks users to run mutable remote installers and unpinned dependency commands that can execute code on their machine.

Review this skill before installing. The thumbnail advice itself is ordinary, but do not run the curl-to-shell or npx commands from a normal workstation with sensitive credentials. Prefer a pinned, manually verified installer, inspect the downloaded script or binary first, run it without sudo in a restricted environment, and log in only after you trust the installed CLI.

A.I.G

Vulnerability Patterns

• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (2)

T03 · Remote Payload Retrieval and Execution

Error

• Location: SKILL.md:14

Finding

Remote installer is downloaded and executed without prior inspection

Content

View full analysis

Remediation

View remediation

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:244

Finding

Unpinned executable and Skill dependencies are installed through npx

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (7)

External Script Fetching

High

• Category: Supply Chain
• Confidence: 99% confidence

Finding

curl ... | sh executes a remote script directly in the user's shell without prior inspection, creating a classic arbitrary code execution and supply-chain risk. Even with claims about checksum verification, the bootstrap script itself is still trusted implicitly at execution time, so compromise of the host, transport, or distribution path could lead to full user-level code execution.

Content

Scanner excerpt · SKILL.md (reported line 14)May include surrounding context.

Quick Start

bash

curl -fsSL https://cli.inference.sh | sh && infsh login

# Generate a thumbnail
infsh app run falai/flux-dev-lora --input '{

Description-Behavior Mismatch

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The manifest presents the skill as thumbnail-design advice, but the content materially drives users into installing and using an external AI generation CLI. This mismatch can mislead reviewers and users about the skill's operational behavior, making risky execution steps seem like harmless design guidance.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The manifest description lists triggers such as "thumbnail design," "thumbnail tips," "video cover image," and especially "ctr optimization," which are broad phrases that may occur in ordinary creative or marketing conversations outside this specific skill context. The file does not provide tighter activation constraints, exclusions, or negative examples to clarify when the skill should or should not be invoked.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The skill grants broad Bash capability and includes third-party CLI installation and execution steps that go beyond passive thumbnail-design guidance. This expands the attack surface by encouraging shell execution of externally sourced tooling, increasing the chance of unintended code execution or environment compromise if users follow the instructions.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 70% confidence

Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 70% confidence

Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 70% confidence

Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.