Security audit
Security checks for vulnerabilities and agentic risk
This skill is a scoped WOL API helper that handles credentials and user-confirmed ordering or registration actions without hidden persistence or unrelated access.
Install this only if you intend to let the agent interact with your WOL account. Review previews carefully before confirming purchases, registration changes, cancellations, or seat changes, and do not paste API tokens into chat; use the provided token setup or WOL_API_TOKEN instead.
The skill declares no explicit tool restrictions even though its instructions clearly rely on shell execution, environment access, file writes, and network connectivity. Without a scoped allowlist, a hosting agent may grant broader-than-necessary capabilities, increasing the blast radius if the skill is misused, prompt-injected, or its bundled script is compromised.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
The script finds the token by itself, so never handle it yourself.
export the token, and never put it in a command line.auth. It shows where the token comes from (hidden) and verifies it against the API.~/.config/wol/token (mode 600). They can also set WOL_API_TOKEN in their environment instead.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
The script finds the token by itself, so never handle it yourself.
export the token, and never put it in a command line.auth. It shows where the token comes from (hidden) and verifies it against the API.~/.config/wol/token (mode 600). They can also set WOL_API_TOKEN in their environment instead.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
if os.path.isfile(path):
mode = os.stat(path).st_mode
if mode & (stat.S_IRWXG | stat.S_IRWXO):
print(f"warning: {path} is readable by other users; run: chmod 600 {path}", file=sys.stderr)
with open(path, encoding="utf-8") as fh:
tok = fh.read().strip()
if tok:
No suspicious patterns detected.