Security audit

DJ mp3 sourcer

Security checks for vulnerabilities and agentic risk

Overview

This skill is coherent for user-directed music sourcing and MP3 cleanup, but it uses external downloader tools and can rename local files in place.

Install the downloader tools in an isolated environment, use the skill only for music you are allowed to access, and run the normalization script only on a dedicated download folder or backup copy because it renames files in place.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:21
Finding: Unpinned Third-Party Executable Dependencies
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/normalize-filenames.sh:33
Finding: Unsanitized Track Metadata Used in Destination Paths and Regular Expressions
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 99% confidence
Finding: The declared description is for a multi-platform music acquisition/downloading skill. The supplied code does something materially different: it validates a local directory and tracklist file, reads artist/title entries with jq, fuzzy-matches existing .mp3 filenames, and renames matched files. There is no network access, no link handling, no downloader logic, no source prioritization, no paid/free platform logic, and no output-format conversion. This is a clear description-behavior mismatch because the code’s primary purpose is filename normalization of already-downloaded MP3s, not music downloading.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The invocation scope is broad enough that the skill may trigger on ordinary music-link requests without strong user confirmation or narrowing conditions. In context, that can cause the agent to perform external lookups and downloads for many benign prompts, increasing the chance of unintended network access, copyright-sensitive actions, and unsafe handling of untrusted URLs.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The skill explicitly directs downloading from external services but does not prominently warn about privacy, network, or untrusted-content risks. Because it processes arbitrary user-supplied links and invokes external tools, users may unknowingly expose IP address, system metadata, or local environment to third-party services and downloaded media could be malicious or unwanted.
Content: No source excerpt is available for this finding.

Behavior Manipulation

Medium

Category: Prompt Injection
Confidence: 70% confidence
Finding: Subtle instructions detected that may alter agent decision-making or introduce hidden biases.
Content: Scanner excerpt · SKILL.md (reported line 44)May include surrounding context.
md
## Core Rule: Prefer Extended Mixes **Always prefer the extended mix over radio edits.** An extended mix from a lower-priority source beats a radio edit from a higher-priority one. Example: extended mix on YouTube > radio edit on Spotify.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This shell script performs in-place file rename operations via mv, which can materially alter user data organization. Although each rename is echoed after it happens, there is no prior confirmation prompt or explicit warning before changes begin.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.