Back to skill

Security audit

Sequenzy

Security checks across malware telemetry and agentic risk

Overview

This Sequenzy guide is mostly legitimate documentation, but it tells agents to perform a permanent campaign cancellation before clarifying intent.

Install only if you are comfortable with an agent operating Sequenzy production workflows. Require the agent to inspect the exact resource and get explicit confirmation before canceling campaigns, deleting resources, changing subscribers/lists, inviting teammates, creating API keys, or changing webhooks.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (7)

Intent-Code Divergence

High
Confidence
98% confidence
Finding
The guidance explicitly says to 'run it first and ask questions after' for campaign cancellation, which encourages irreversible action before confirming user intent. In an agent setting, this weakens human-in-the-loop safeguards and can cause unauthorized cancellation of live or scheduled campaigns with immediate business impact.

Vague Triggers

Medium
Confidence
88% confidence
Finding
The skill is intentionally broad and says to activate whenever the user refers broadly to Sequenzy, but it does not define strong exclusion boundaries or require confirmation before high-impact actions. That increases the chance an agent will invoke this skill in loosely related contexts and then proceed into operational guidance for account, campaign, subscriber, or webhook mutations the user did not clearly intend.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill documents `campaigns cancel` as immediately stopping scheduled, paused, waiting-approval, or sending campaigns with no confirmation prompt, but it frames this as normal workflow support rather than a dangerous operation. In an agent setting, that omission materially raises the risk of accidental interruption of active marketing sends, causing business disruption and possible revenue loss.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The cancellation guidance promotes immediate destructive action without a user-warning safeguard, despite cancellation being permanent. In an automated assistant context, this can cause accidental or unauthorized interruption of customer communications and revenue-impacting sends.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
- segments `list`, `create`, `update`, `delete`, and `count`, including `--match any`, nested filter roots, custom event filters, and saved-segment composition filters
- templates `list`, `get`, `create`, `update`, and `delete`, with `list` supporting label filters and `create`/`update` accepting labels, raw HTML, or Sequenzy block JSON
- campaigns `list`, `get`, `create`, `update` including label and reply-to updates, `schedule`, and `test`, with `list` supporting label filters, `create` accepting labels plus raw HTML, Sequenzy block JSON, or prompt-generated content, `update` accepting labels plus raw HTML or Sequenzy block JSON, and `schedule` returning a review preview link
- campaign lifecycle control with `campaigns cancel` (stops scheduled, paused, waiting-approval, or sending campaigns immediately, no confirmation prompt), `campaigns pause` and `campaigns resume` for an active send (resume supports `--spread-over-hours`), `campaigns delete` (blocked while sending, scheduled, or paused - cancel first), and `campaigns duplicate` with `--mode campaign|ab_test|variant`
- ab-tests `list`, `get`, `stats`, `restart`, `update-variant`, `create`, `add-variant`, `delete-variant`, and `delete`; create/add-variant/delete-variant/delete work on campaign A/B tests in draft status, variant A is the protected control, and `restart` reruns a finished sequence A/B test
- MCP template and campaign tools support labels on list/create/update; MCP `update_campaign` also supports `replyTo` and `replyProfileId`, and MCP `schedule_campaign` schedules draft or already scheduled campaigns
- MCP `search_subscribers` supports list filters through `list`, `listId`, or `listName`; MCP `add_subscribers_to_list` accepts up to 500 emails per call
Confidence
90% confidence
Finding
no confirmation

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
- `campaigns get` now includes saved reply-to details when the campaign has a reply profile
- only draft campaigns can be updated through this API path
- there is no CLI command for immediate send; schedule with a near-future `--at` timestamp instead
- `cancel` works from scheduled, sending, paused, waiting_approval, and rejected statuses; it shows no confirmation prompt so a bad send can be stopped fast
- `pause` only works on a campaign in sending status; `resume` only works on a paused campaign
- `resume --spread-over-hours` accepts integers from 1 to 72 to spread the remaining delivery
- `delete` is blocked while the campaign is sending, scheduled, or paused; cancel it first
Confidence
83% confidence
Finding
no confirmation

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
- use `cancel` when the send should not continue at all; it is permanent and works from scheduled, sending, paused, waiting-approval, and rejected statuses
- use `pause` when the user wants to stop a send temporarily and may continue it; it only works while the campaign is in sending status
- use `resume` to continue a paused campaign, optionally spreading the remaining delivery with `--spread-over-hours` (1-72)
- `cancel` needs no `--yes` and shows no confirmation prompt, so it is the fastest way to stop a bad send; run it first and ask questions after when the user reports a mistake
- check `campaigns get` first when you are unsure of the current status; the API rejects transitions from the wrong status

MCP equivalents are `cancel_campaign`, `pause_campaign`, and `resume_campaign` (optional `spreadOverHours`).
Confidence
99% confidence
Finding
no confirmation

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.