Atomgit Powershell

• Outcome: Review
• Latest audit: Sep 15, 2026 · 1:33 AM UTC
• Version: 3.0.1

Overview

This AtomGit skill is mostly a disclosed repository-management tool, but its batch PowerShell script can perform authenticated PR approvals just by being loaded.

Review this skill carefully before installing. Use only a least-privilege AtomGit token, avoid putting tokens in command lines or URLs, and do not dot-source the batch script unless it has been fixed so loading it cannot approve any PRs. Treat bulk approval and merge commands as live repository changes that may affect review integrity and automation.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (3)

T09 · Insecure Skill Coding Practices

Error

• Location: scripts/atomgit-batch.ps1.txt:14

Finding

Dot-Sourcing the Batch Script Automatically Approves Hard-Coded Pull Requests

Content

View full analysis

Remediation

View remediation

T09 · Insecure Skill Coding Practices

Warning

• Location: scripts/atomgit-batch.ps1.txt:206

Finding

Parallel Batch Approval Bypasses Function-Level Input and Concurrency Validation

Content

View full analysis

Remediation

View remediation

T09 · Insecure Skill Coding Practices

Warning

• Location: API-REFERENCE.md:16

Finding

API Documentation Recommends Passing Access Tokens in URL Query Strings

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (38)

Missing User Warnings

High

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The batch approval workflow enables parallel approval of multiple PRs and is presented as a performance feature without strong caution about governance or review integrity. In the context of a repository-management skill, bulk approvals can bypass meaningful human review at scale, increasing the chance of unsafe code being trusted and merged across important repositories.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · API-REFERENCE.md (reported line 4)May include surrounding context.

md

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · API-REFERENCE.md (reported line 13)May include surrounding context.

md

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · API-REFERENCE.md (reported line 16)May include surrounding context.

md

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · API-REFERENCE.md (reported line 19)May include surrounding context.

md

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · API-REFERENCE.md (reported line 94)May include surrounding context.

md

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · API-REFERENCE.md (reported line 100)May include surrounding context.

md

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · API-REFERENCE.md (reported line 106)May include surrounding context.

md

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · API-REFERENCE.md (reported line 114)May include surrounding context.

md

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 215)May include surrounding context.

md

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 296)May include surrounding context.

md

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 301)May include surrounding context.

md

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/atomgit-batch.ps1.txt (reported line 174)May include surrounding context.

text

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/atomgit-batch.ps1.txt (reported line 188)May include surrounding context.

text

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/atomgit-batch.ps1.txt (reported line 268)May include surrounding context.

text

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/atomgit-batch.ps1.txt (reported line 275)May include surrounding context.

text

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/atomgit.ps1.txt (reported line 5)May include surrounding context.

text

# AtomGit-PowerShell API 快速参考

> **API 版本**: v5  
> **Base URL**: `https://api.atomgit.com/api/v5`  
> **技能版本**: v3.0.0

---

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The authentication section recommends header-based auth but also documents passing access tokens in the URL query string without any warning. Tokens in URLs can be exposed via browser history, shell history, logs, proxies, referrers, and monitoring systems, leading to credential leakage and unauthorized API access.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

This markdown file includes POST/PUT endpoints for adding PR comments, creating/updating issues, and merging pull requests, plus a concrete merge example. The document does not disclose that these actions modify remote repository state and may be irreversible or workflow-impacting, which matches the markdown-specific missing-warning criterion for user data/system integrity effects.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · API-REFERENCE.md (reported line 93)May include surrounding context.

获取用户信息

bash

curl -H "Authorization: Bearer TOKEN" \
  https://api.atomgit.com/api/v5/user

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 89% confidence

Finding

The documentation promotes parallel batch approval of multiple PRs, which is a safety-sensitive bulk operation affecting several remote resources at once. There is no accompanying warning about verifying the target PR list, limiting scope, or the risk of accidental mass approvals.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 85% confidence

Finding

This markdown file describes state-changing operations such as approving and merging pull requests, which can directly affect repository workflow and project history. The examples show how to perform these actions but provide no warning or caution about their consequences, review requirements, or reversibility considerations.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The skill advertises capabilities such as approving, merging, and repository management directly in the top-level description, but does not pair them with an explicit warning that these actions modify remote state and may be irreversible. In an agent skill context, prominently exposing destructive operations without user-facing cautions increases the risk of accidental authorization of impactful actions.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The batch approval feature encourages parallel bulk processing of PRs and emphasizes performance gains, but does not include a strong warning that it can apply remote approvals at scale very quickly. That makes operator mistakes more damaging, especially in automated or agent-assisted workflows where multiple PRs may be approved before a human notices an error.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The documentation instructs users to pass a personal access token directly on the command line without warning about secrecy or safer handling. Tokens entered this way may be exposed through shell history, process listings, logs, screenshots, or copied transcripts, which can lead to account compromise on the code hosting platform.

Content

No source excerpt is available for this finding.