Back to skill

Security audit

golang-samber-ro

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-oriented Go reactive-streams skill whose sensitive-looking items are disclosed library features, not hidden behavior by the skill itself.

Install this if you want Go assistance for samber/ro reactive streams. Be aware that generated application code may use plugins for HTTP, filesystem watching, cron scheduling, signals, or process integration when you ask for those patterns, so review such code for appropriate paths, timeouts, retry limits, and operational permissions.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
80% confidence
Finding

Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.

Content

Scanner excerpt · evals/evals.json (reported line 292)May include surrounding context.

json
"Mentions that samber/ro is at v0.x (pre-v1.0.0)",
        "Warns about potential breaking changes before v1",
        "Mentions that the library follows SemVer",
        "Does NOT present the library as fully stable/production-ready without caveats"
      ]
    }
  ]

Unbounded Resource Access

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.

Content

Scanner excerpt · references/operators-guide.md (reported line 184)May include surrounding context.

md
| `Catch[T](fn func(error) Observable[T])` | Catch error, switch to recovery observable |
| `OnErrorReturn[T](value T)` | Replace error with fallback value |
| `OnErrorResumeNextWith[T](obs ...Observable[T])` | Continue with fallback observables on error |
| `Retry[T]()` | Retry indefinitely on error |
| `RetryWithConfig[T](cfg RetryConfig)` | Retry with max attempts, delay, backoff |
| `ThrowIfEmpty[T](fn func() error)` | Error if stream completes empty |

Context-Inappropriate Capability

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

The manifest frames the skill as guidance for using the samber/ro reactive programming library and its stream-processing features. Advertising a plugins/proc capability for process execution introduces a system-command capability that is not an obvious requirement of adopting a reactive streams library and expands into a materially different operational domain.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.