Security audit

dmxapi-image-recognition

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward DMXAPI image-recognition skill, with normal third-party image upload risks that users should understand before sending sensitive images.

Install the CLI from a trusted source, preferably pinned or isolated to a project, and do not upload identity documents, contracts, medical, financial, or confidential screenshots unless you are authorized and comfortable sending them to DMXAPI for processing.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:16
Finding: Unpinned Global Installation of a Third-Party CLI
Content: View full analysis
Remediation: View remediation
``` 2. Prefer a project-local installation and invoke it through a package script or `npx --no-install` rather than modifying the global tool environment. 3. Commit and verify an npm lockfile so dependency resolution remains reproducible. 4. Verify package provenance, publisher identity, registry source, and integrity metadata before installation. 5. Disable lifecycle scripts during installation where compatible: ```bash npm install --ignore-scripts ``` 6. Review any required lifecycle scripts separately before allowing them to run. 7. Run the CLI under a least-privileged account or sandbox with restricted filesystem and network access. 8. Document the approved package source and update process, including security review requirements before changing the pinned version. ]]>

other

Warning

Location: SKILL.md:131
Finding: External Transmission of Sensitive Images Without Documented Privacy Safeguards
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill includes an example for extracting a name and ID number from an ID-card image, which involves highly sensitive personal data, yet provides no privacy, consent, minimization, or compliance warning. In context, this makes misuse easier and normalizes processing regulated identity data through an external AI service without informing the operator of the risks.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill explicitly supports sending local image files and remote image URLs to the DMXAPI service, but it does not clearly warn users that image contents will leave the local environment and be processed by a third party. This creates a real privacy and data-handling risk because users may unknowingly submit sensitive screenshots, documents, or personal photos to an external API.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.