Security audit

OpenBio

Security checks for vulnerabilities and agentic risk

Overview

The skill mostly matches its OpenBio API purpose, but its update instructions are too broad and can replace the skill globally across agents from mutable remote sources.

Review before installing. Use the OpenBio API only for data you are comfortable sending to OpenBio, protect OPENBIO_API_KEY, and do not run remote returned update/install commands. Prefer a pinned reviewed release, avoid --global --agent '*' -y, and require explicit approval for updates or plasmid edits that overwrite files.

A.I.G

Vulnerability Patterns

Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T03 · Remote Payload Retrieval and Execution

Error

Location: rules/api.md:39
Finding: Remote API Response Is Trusted as an Executable Update Instruction
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: SKILL.md:46
Finding: Unpinned Supply-Chain Update Uses Global Wildcard Agent Installation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (177)

Anti-Refusal Statement

High

Category: Anti-Refusal
Confidence: 80% confidence
Finding: Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
Content: Scanner excerpt · rules/plasmid.md (reported line 389)May include surrounding context.
md
→ No warning about frameshift (5 is not a multiple of 3)

Ae4

Medium

Category: analysis-evasion
Confidence: 80% confidence
Finding: Suspicious Unicode normalization or mixed-script content
Content: No source excerpt is available for this finding.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 43)May include surrounding context.
Before using the API, verify your skill is up to date:

bash
curl -s "https://api.openbio.tech/api/v1/tools/skill-version"

This returns {"skill": "openbio", "version": "X.Y.Z", ...}. Compare against the version field at the top of this file (currently 1.0.4). If the API returns a newer version:

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 36)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 43)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 63)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 66)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 70)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 74)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 80)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 137)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 146)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 150)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · rules/api.md (reported line 13)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · rules/api.md (reported line 20)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · rules/api.md (reported line 34)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · rules/api.md (reported line 65)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · rules/api.md (reported line 73)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · rules/api.md (reported line 77)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · rules/api.md (reported line 110)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · rules/api.md (reported line 117)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · rules/api.md (reported line 124)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · rules/api.md (reported line 142)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · rules/api.md (reported line 173)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · rules/api.md (reported line 196)May include surrounding context.
-H "X-API-Key: $OPENBIO_API_KEY"

text
**Base URL**: `https://api.openbio.tech/api/v1` ## Critical: Always Check Tool Schema