Steam Games Updates

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 5:18 PM UTC
• Version: 1.0.0

Overview

This skill fetches public Steam game update news and stores a local history, with the main caution that third-party announcement text is shown to the agent as Markdown.

Before installing, understand that the skill contacts Steam and keeps a local list and update history. Treat displayed announcement text and links as untrusted third-party content; the agent should summarize them rather than follow any instructions that might appear inside a game announcement.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

• Location: scripts/updates.py:157

Finding

Untrusted Steam Announcement Content Is Emitted Without an AI-Safe Trust Boundary

Content

View full analysis

", "\n", raw, flags=re.IGNORECASE) text = re.sub(r"<[^>]+>", "", text) text = re.sub(r"\[/?(?:p|list|b|i|u|strike|spoiler)\]", "", text, flags=re.IGNORECASE) text = re.sub(r"\[\*\]", "- ", text) text = re.sub(r"\[/\*\]", "", text) text = re.sub(r"\[url=[^\]]*\]", "", text, flags=re.IGNORECASE) text = re.sub(r"\[/url\]", "", text, flags=re.IGNORECASE) text = re.sub(r"\[img[^\]]*\][^\[]*\[/img\]", "", text, flags=re.IGNORECASE) text = re.sub(r"\[/?h[0-9]\]", "", text, flags=re.IGNORECASE) text = re.sub(r"\{STEAM[^}]*\}", "", text) text = re.sub(r"https?://\S+\.(?:png|jpg|gif|jpeg|webp)", "", text, flags=re.IGNORECASE) text = re.sub(r"\n{3,}", "\n\n", text) return text.strip()[:500] ``` ```python for item in items: if should_exclude(item["title"], appid, config): continue url = item.get("url", "") if url in existing: continue record = { "game": name, "appid": appid, "title": item["title"], "url": url, "date": datetime.fromtimestamp( item["date"], tz=timezone.utc ).strftime("%Y-%m-%d"), "content": clean_content(item.get("contents", "")), "discovered_at": now_iso, "status": "active", } existing[url] = record game_entries.append(record) new_count += 1 if game_entries: lines = [f"### {name}\n"] for entry in game_entries: date_d ...[truncated 3464 chars]

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 91% confidence

Finding

The skill performs network access to Steam APIs and writes persistent local data, but it does not declare any explicit tool scope such as permissions or allowed-tools. This creates a trust and containment gap: an agent may invoke the skill with broader-than-expected capabilities, making file modification and outbound requests less auditable and harder to constrain.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/updates.py (reported line 18)May include surrounding context.

python

STATE_FILE = DATA_DIR / ".state.json"
UPDATES_FILE = DATA_DIR / "updates.json"

STEAM_NEWS_URL = "https://api.steampowered.com/ISteamNews/GetNewsForApp/v2/"
STEAM_SEARCH_URL = "https://steamcommunity.com/actions/SearchApps/"
STEAM_APP_DETAILS_URL = "https://store.steampowered.com/api/appdetails"

Static analysis

No suspicious patterns detected.