Security audit

Stac Search

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward STAC search command-line skill with expected network queries and no hidden local data access or persistence.

Install this only in an environment where outbound requests to STAC servers are acceptable. Use trusted endpoints for sensitive locations or operational areas, and consider pinning or constraining requests to a current patched version before deployment.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

Low

Confidence: 90% confidence
Finding: The skill encourages use of arbitrary custom STAC endpoints without warning that user-supplied search parameters, geospatial areas of interest, and other query metadata will be sent to third-party servers. In a geospatial context, bbox, collections, and date ranges may reveal sensitive operational interests or locations, so silent transmission can create privacy and data-governance risk.

Unpinned Dependencies

Low

Category: Supply Chain
Content: requests>=2.28.0
Confidence: 98% confidence
Finding: requests>=2.28.0

Known Vulnerable Dependency: requests==2.28.0 — 8 advisory(ies): CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi); CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func) +5 more

High

Category: Supply Chain
Confidence: 72% confidence
Finding: requests==2.28.0

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: tests/conftest.py:12