Security audit

GNews CLI

Security checks for vulnerabilities and agentic risk

Overview

The skill has a clear GNews CLI purpose, but it asks users to build and run unpinned code from GitHub and includes a troubleshooting command that can expose the API key.

Install only after reviewing the upstream repository and prefer a pinned release or commit with checksum or signature verification. Avoid the sudo global install unless needed, and do not run or share `echo $GNEWS_API_KEY`; use a non-printing presence check and rotate the key if it was exposed.

A.I.G

Vulnerability Patterns

Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:91
Finding: API Key Disclosure Through Troubleshooting Command
Content: View full analysis
Remediation: View remediation

T03 · Remote Payload Retrieval and Execution

Error

Location: SKILL.md:25
Finding: Mutable Remote Source Is Retrieved, Built, and Executed Without Integrity Verification
Content: View full analysis
Remediation: View remediation
go build -o gnews-client . ``` Apply the following additional controls: - Publish and verify a cryptographic checksum for the expected source archive or binary. - Prefer signed release tags and verify the maintainer's signature before building. - Pin and review Go module dependencies, and verify dependency checksums. - Document the exact reviewed version in `SKILL.md`. - Default to installation in a user-owned directory such as `$HOME/.local/bin`. - Avoid `sudo` and system-wide installation unless explicitly required by the user. - Build and test the binary in an isolated environment with restricted filesystem and network access before normal execution. - Review the fetched source and dependency changes whenever the pinned version is updated. ]]>

SkillSpector

Vulnerability Patterns

Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Sudo/Root Execution

Medium

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Content: Scanner excerpt · SKILL.md (reported line 38)May include surrounding context.
Optional global install:

bash
sudo install gnews-client /usr/local/bin/

Using The Binary (Detailed)

Static analysis

No suspicious patterns detected.