T09 · Insecure Skill Coding Practices
Warning
- Location
y2kaestheticgenerator.js:31- Finding
API Token Exposed Through Command-Line Arguments
- Content
View full analysis
- Remediation
View remediation
Security audit
Y2k Aesthetic Generator
Security checks for vulnerabilities and agentic risk
Overview
The skill does what it claims, but it asks users to put an API token directly on the command line and recommends an unpinned npx install path.
Review before installing. Use a safer token handling method if possible, avoid putting real tokens directly in shell commands, rotate the token if it was exposed in history or logs, and prefer a pinned or trusted installer path rather than the unversioned npx command.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)
T08 · Insecure Dependencies
Warning
- Location
SKILL.md:32- Finding
Unpinned Package Execution in Installation Instructions
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (8)
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 90% confidence
- Finding
The README instructs users to install and execute the skill via
npx skills add omactiengartelle/y2k-aesthetic-generatorwithout pinning a specific version. This creates a supply-chain risk because users may fetch whatever package or artifact is current at install time, including a later compromised or malicious update. In this context, the issue is moderately dangerous because the document is explicitly telling end users how to retrieve and run code from a moving target.- Content
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 89% confidence
- Finding
The skill advertises only the Bash tool and does not declare an explicit tool scope or permissions boundary, while its documented usage clearly depends on outbound network access to the Neta API. That mismatch weakens least-privilege controls and can allow broader-than-expected runtime capabilities, making review and enforcement harder if the skill or its dependencies are modified.
- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 87% confidence
- Finding
Using
npx skills add omactiengartelle/y2k-aesthetic-generatorwithout pinning a specific version makes installation non-reproducible and exposes users to supply-chain risk if the package, tag, or upstream installer behavior changes. An attacker who compromises the referenced package or publishes a malicious update could cause arbitrary code execution during install or later use.- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The script requires the API token to be passed via the --token command-line argument and even documents that usage in the help text. Command-line arguments are commonly exposed via shell history, process listings, job control tools, CI logs, and crash reports, so this can leak the credential to other local users or logging systems.
- Content
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 70% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
js body.inherit_params = { collection_uuid: ref, picture_uuid: ref }; } const res = await fetch("https://api.talesofai.com/v3/make_image", { method: "POST", headers: { "x-token": token,
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 60% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
js body.inherit_params = { collection_uuid: ref, picture_uuid: ref }; } const res = await fetch("https://api.talesofai.com/v3/make_image", { method: "POST", headers: { "x-token": token,
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 60% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
js body.inherit_params = { collection_uuid: ref, picture_uuid: ref }; } const res = await fetch("https://api.talesofai.com/v3/make_image", { method: "POST", headers: { "x-token": token,
Vague Triggers
Low
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The 'When to use' section says to use the skill when someone asks to 'generate or create y2k aesthetic photo generator images,' which is imprecise and does not clearly define what requests should or should not activate the skill. It provides no negative examples or constraints, so the trigger scope is underspecified for a markdown skill description.
- Content
Static analysis
No suspicious patterns detected.