Sixtyfour Skill

• Outcome: Review
• Latest audit: Sep 11, 2026 · 4:47 AM UTC
• Version: 1.0.0

Overview

This appears to be a legitimate lead-enrichment skill, but it needs review because it handles personal contact data and recommends running an unpinned npm MCP server with an API key.

Install only if you are allowed to send lead, company, and contact data to Sixtyfour AI. Use a narrowly scoped API key with usage limits, avoid personal email or phone lookups without a lawful basis and approval, review bulk CSV uploads carefully, and pin or separately review the MCP package before running it instead of using the unpinned `npx -y` example.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:351

Finding

Unpinned npm Package Is Automatically Downloaded and Executed with API Key Access

Content

View full analysis

Remediation

View remediation

"], "env": { "SIXTYFOUR_API_KEY": "your_key" } } } } ``` 2. Install the pinned dependency through a package manifest and committed lockfile rather than downloading the latest package at every launch. 3. Verify package provenance, publisher identity, release signatures where available, and npm integrity metadata before installation. 4. Remove `-y` where automatic installation is unnecessary so unexpected downloads require explicit approval. 5. Prefer `--no-install` during runtime after performing a separate, controlled installation step. 6. Review the package and its transitive dependencies before updating the pinned version. 7. Use a narrowly scoped API key, impose usage or billing limits where supported, and document immediate key rotation procedures. 8. Run the MCP server in a restricted environment with minimal filesystem, environment-variable, and network access. 9. Update both `SKILL.md` and `README.md` so all installation examples consistently use the pinned and verified dependency workflow. ]]>

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (46)

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 95% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · README.md (reported line 1)May include surrounding context.

md

# Sixtyfour AI — Agent Skill

People and company intelligence for AI agents. Research anyone or any company with AI agents that read the live web — not static databases.

## What This Skill Does

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/api-details.md (reported line 151)May include surrounding context.

GET /workflows/{id} — Get workflow definition POST /workflows — Create (workflow_name + workflow_definition) PATCH /workflows/{id} — Update (partial) DELETE /workflows/{id} — Delete (204)

text

### Execute

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 89% confidence

Finding

The README promotes collection of emails, phone numbers, and other personal profile data but provides no warning about privacy, consent, legal basis, or data-handling obligations. In a lead-enrichment skill, this omission increases the risk of misuse, noncompliant processing, and unsafe handling of sensitive personal data.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 84% confidence

Finding

The README instructs users to run an MCP server via npx sixtyfour-mcp without pinning a specific version. This causes execution of whatever package version is current at install time, increasing supply-chain risk if a malicious or compromised release is published.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The skill explicitly supports finding personal emails and phone numbers, which are privacy-sensitive identifiers, but provides no user warning, consent guidance, or policy constraints. In an agent setting this can normalize collection of personal contact data and lead to misuse, especially when the tool is invoked for broad enrichment rather than narrowly justified business purposes.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 52)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 14)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 46)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 118)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 161)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 174)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 192)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 208)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 221)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 255)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 263)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 267)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 275)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 290)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 294)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 300)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 304)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-details.md (reported line 130)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · references/api-details.md (reported line 184)May include surrounding context.

md

**Auth header:** `x-api-key: YOUR_API_KEY` (all requests)  
**Free tier:** 50 deep researches on signup — [app.sixtyfour.ai](https://app.sixtyfour.ai) (Google sign-in, API key available immediately)  
**Docs:** [docs.sixtyfour.ai](https://docs.sixtyfour.ai)  
**OpenAPI spec:** [api.sixtyfour.ai/openapi.json](https://api.sixtyfour.ai/openapi.json)

## Setup

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 46)May include surrounding context.

The core endpoint. Give it a name — get back a full profile with any fields you define.

bash

curl -X POST "https://api.sixtyfour.ai/enrich-lead" \
  -H "x-api-key: $SIXTYFOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{

Static analysis

No suspicious patterns detected.