Sticker Pack Generator

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 4:11 AM UTC
• Version: 1.0.0

Overview

This is a straightforward sticker image generator that sends user-provided prompts and a user-supplied token to an external image API, with install and token-handling caveats users should understand.

Install only if you are comfortable sending your prompt, optional reference image UUID, and Neta API token to api.talesofai.com. Avoid putting real secrets, private concepts, or personal data in prompts, prefer a limited or disposable API token, and consider pinning the installer/source version rather than relying on the mutable npx command.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:31

Finding

Unpinned Third-Party Installer Execution

Content

View full analysis

Remediation

View remediation

add ``` 2. Reference the Skill by an immutable commit hash or a signed, versioned release rather than a mutable repository identifier. 3. Publish and verify cryptographic checksums or signatures for release artifacts. 4. Configure npm to use a trusted registry and review the package provenance before installation. 5. Prefer installation workflows that do not execute newly downloaded code automatically. 6. Document the exact installer version, Skill revision, expected checksum, and verification procedure. 7. Periodically audit pinned dependencies before intentionally upgrading them. ]]>

T09 · Insecure Skill Coding Practices

Note

• Location: stickerpackgenerator.js:13

Finding

API Token Exposed Through Command-Line Arguments

Content

View full analysis

). Pass it via the `--token` flag. ```bash node

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (8)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 95% confidence

Finding

The skill claims to use the Neta AI service for sticker-pack generation, but the analysis indicates behavior tied to a different API and additional capabilities not disclosed in the description. This kind of description-behavior mismatch can mislead users into providing prompts, tokens, or reference-image identifiers to an unexpected backend, undermining informed consent and masking data-flow or privacy risks.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The README explicitly instructs users to send free-form prompts and an API token to a third-party image-generation service, but provides no warning about data disclosure, retention, or privacy implications. Users may unknowingly transmit sensitive text, personal data, or proprietary concepts to an external provider, and the token itself is handled via command-line examples that may also be exposed through shell history or process inspection.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 70% confidence

Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 70% confidence

Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The phrase 'Use when someone asks to generate or create ai sticker pack generator images' is ambiguous and not constrained to specific invocation phrases or contexts. It could overlap with many ordinary image-generation requests and does not clarify when this skill should be preferred versus other image tools.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The script sends both the user prompt and bearer-like API token to a third-party service via request headers/body, but provides no meaningful disclosure beyond a generic token-required message. In an agent/skill context, this can cause users to unknowingly transmit sensitive prompts, reference IDs, or credentials to an external provider, creating privacy and data-handling risk.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 90% confidence

Finding

This POST request transmits user-controlled content (the prompt and optional reference identifier) and an authentication token to an external domain. External transmission is expected for an image-generation skill, but it still represents a real data exfiltration boundary because any sensitive input provided to the skill leaves the local environment and is processed by a third party.

Content

Scanner excerpt · stickerpackgenerator.js (reported line 87)May include surrounding context.

js

body.inherit_params = { collection_uuid: refFlag, picture_uuid: refFlag };
  }

  const makeRes = await request('POST', 'https://api.talesofai.com/v3/make_image', body);

  let taskUuid;
  if (typeof makeRes === 'string') {

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · stickerpackgenerator.js (reported line 102)May include surrounding context.

js

const MAX_ATTEMPTS = 90;
  for (let i = 0; i < MAX_ATTEMPTS; i++) {
    await sleep(2000);
    const pollRes = await request('GET', `https://api.talesofai.com/v1/artifact/task/${taskUuid}`);
    const status = pollRes.task_status;

    if (status === 'PENDING' || status === 'MODERATION') {

Static analysis

No suspicious patterns detected.