Security audit

Uplo Energy

Security checks for vulnerabilities and agentic risk

Overview

The skill appears purpose-built for UPLO energy knowledge search, but it combines sensitive energy-sector data access with broad export/logging capabilities and an unpinned auto-downloaded MCP server.

Install only if you trust the UPLO MCP server package and can use a least-privilege UPLO token. Prefer a pinned, reviewed MCP package version, verify the endpoint is HTTPS, confirm server-side authorization/classification controls, and avoid full organizational exports or conversation logging unless your role and retention policy explicitly allow them.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Error

Location: skill.json:25
Finding: Unpinned Third-Party Package Is Automatically Downloaded and Executed
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: skill.json:42
Finding: Broad Organizational Context Export Conflicts with Least-Privilege Access
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The README advertises an export_org_context tool that can produce a full organizational context snapshot, but it does not warn users about the sensitivity of exported data or the privacy and access-control implications. In a knowledge-management product for energy-sector records, this increases the risk of inadvertent bulk disclosure of internal, confidential, or restricted operational information by normalizing export capability without cautionary guidance.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The skill explicitly instructs use of log_conversation to create an auditable record of compliance evidence assembly, but it does not warn the user that their prompts, summaries, and tool usage may be retained as a durable record. In this energy-sector context, those logs can contain sensitive operational, regulatory, cybersecurity, or CEII-adjacent details, creating privacy, confidentiality, and compliance risk if users are not informed and data minimization is not enforced.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The skill requires a secret API key and connects to a remote HTTP MCP endpoint, but the manifest provides no user-facing disclosure about credential use, remote transmission, or what data may be sent off-platform. In a power/grid intelligence context, this increases the risk of sensitive queries, documents, or operational context being transmitted to an external service without informed consent.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The manifest exposes an export_org_context capability even though the stated purpose is knowledge search and retrieval. That materially broadens the data-access surface to include bulk organizational context export, which could enable unnecessary exfiltration of sensitive operational, regulatory, or safety-related information from an energy-sector environment.
Content: No source excerpt is available for this finding.