Security audit

Skill Deps Doctor

Security checks for vulnerabilities and agentic risk

Overview

The skill is a dependency-checking helper, but its fallback wrapper can import executable Python code from the current directory and its main dependency is installed unpinned.

Install only from a trusted, pinned release if possible, avoid using the fallback wrapper from untrusted project directories, and prefer the normal installed skill-deps-doctor command or a vendored trusted package until the current-directory import search is removed.

A.I.G

Vulnerability Patterns

Tool Hijacking and SpoofingModifies or replaces tools so legitimate-looking calls execute attacker logic
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T07 · Tool Hijacking and Spoofing

Error

Location: scripts/skill-deps-doctor.py:26
Finding: Arbitrary Python Code Execution Through Current-Directory Module Hijacking
Content: View full analysis
Remediation: View remediation
None: skill_dir = HERE.parents[1].resolve() vendor_dir = (skill_dir / "vendor").resolve() package_dir = vendor_dir / "skill_deps_doctor" if package_dir.is_dir(): package_dir.relative_to(skill_dir) sys.path.insert(0, str(vendor_dir)) ``` ]]>

T08 · Insecure Dependencies

Warning

Location: SKILL.md:4
Finding: Unpinned Third-Party Package Installation Creates a Supply-Chain Risk
Content: View full analysis
Remediation: View remediation
``` 2. Install from a lock file or requirements file containing cryptographic hashes: ```text skill-deps-doctor== \ --hash=sha256: ``` Use `pip install --require-hashes -r requirements.txt` where supported. 3. If Git installation remains available, pin it to a reviewed immutable commit rather than a mutable branch: ```bash pip install "git+https://github.com/RangeKing/skill-deps-doctor.git@" ``` 4. Prefer vendoring the audited implementation beneath `vendor/skill_deps_doctor` so that the executed code is included in the Skill review. 5. Verify package provenance and release signatures where the distribution workflow supports them. 6. Maintain a controlled update process that reviews new dependency versions before changing the pin or hash. 7. Run third-party plugins only when explicitly enabled and sourced from trusted, pinned distributions. ]]>

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.