Phy Path Traversal Audit

• Outcome: Review
• Latest audit: Sep 12, 2026 · 8:04 AM UTC
• Version: 1.0.3

Overview

The skill looks like a legitimate path traversal audit tool, but the shipped artifact does not provide a working scanner and could give users false security confidence.

Treat this as a Review item before installing. It does not show hidden data theft, persistence, or network behavior, but do not rely on it as a CI security gate until the scanner is packaged as an actual Python file, the import-time bug is fixed, and tests prove it catches and reports expected vulnerabilities.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Error

• Location: SKILL.md:319

Finding

Scanner Fails at Startup Due to Function Use Before Definition

Content

View full analysis

Remediation

View remediation

T09 · Insecure Skill Coding Practices

Warning

• Location: SKILL.md:438

Finding

Unrelated Nearby Guard Can Suppress Genuine Path-Traversal Findings

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Intent-Code Divergence

High

• Category: Not specified by scanner
• Confidence: 99% confidence

Finding

The implementation references _build_js_path_patterns() inside the PATTERNS dictionary before that helper is defined, which would raise a runtime error during module import and prevent the scanner from running as documented. A broken security scanner creates a dangerous false sense of protection because users may believe path traversal checks are being enforced when no scan actually occurs.

Content

No source excerpt is available for this finding.

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.

What Is Path Traversal?

An attacker passes ../../etc/passwd or ..%2F..%2Fetc%2Fshadow as a filename parameter. Without validation, your code reads arbitrary files outside the intended base directory. With PHP include, it can lead to Remote Code Execution.

Classic exploit:

text

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 32)May include surrounding context.

What Is Path Traversal?

An attacker passes ../../etc/passwd or ..%2F..%2Fetc%2Fshadow as a filename parameter. Without validation, your code reads arbitrary files outside the intended base directory. With PHP include, it can lead to Remote Code Execution.

Classic exploit:

text

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 34)May include surrounding context.

What Is Path Traversal?

An attacker passes ../../etc/passwd or ..%2F..%2Fetc%2Fshadow as a filename parameter. Without validation, your code reads arbitrary files outside the intended base directory. With PHP include, it can lead to Remote Code Execution.

Classic exploit:

text

Description-Behavior Mismatch

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The manifest and surrounding documentation describe a path traversal and LFI scanner focused on user-controlled paths reaching file system sinks, with examples centered on reads/includes and CWE-22/CWE-23/CWE-98 style traversal issues. The implementation additionally includes a Node.js pattern for fs.writeFile/writeFileSync/appendFile with request input, extending behavior into arbitrary file overwrite/write detection that is not disclosed in the manifest's stated scope.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.