Security audit

Instagram Photo Text Overlay

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local image-overlay tool with disclosed options; its main caveats are a default third-party watermark and an unpinned Pillow install instruction.

Before installing, know that generated images include a `tabiji.ai` watermark by default unless the agent passes an empty `--watermark`; use a virtual environment and a pinned Pillow version if reproducible installs matter.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

other

Note

Location: scripts/overlay.py:285
Finding: Third-Party Promotional Watermark Enabled by Default
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Note

Location: SKILL.md:49
Finding: Unpinned Pillow Dependency Installation
Content: View full analysis
Remediation: View remediation
``` 2. Generate and verify cryptographic hashes, for example by using a hash-locked requirements file and: ```bash python -m pip install --require-hashes -r requirements.txt ``` 3. Install the dependency inside a dedicated virtual environment rather than the system Python environment. 4. Use the canonical package index over TLS and avoid untrusted extra indexes. 5. Add a controlled dependency-update process that includes vulnerability scanning, compatibility tests, and review before changing the pinned version. ]]>

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Description-Behavior Mismatch

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The manifest describes generating Instagram images with gradient overlays, titles, and optional numbered lists for itineraries or top-5 style content. The code additionally implements a dedicated quote layout with quote text and author attribution, which is a broader content type than the manifest advertises.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.