ISS Tracker

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 9:27 PM UTC
• Version: 1.0.0

Overview

This skill simply fetches and displays the ISS location, with a minor integrity/privacy caveat because it uses an unencrypted HTTP API.

Before installing, be aware that running the skill contacts a third-party ISS location service over HTTP, so the displayed coordinates could be tampered with on the network and the service will see the request. Prefer an HTTPS data source if accurate, authenticated location data matters.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Note

• Location: SKILL.md:14

Finding

Unencrypted HTTP Transport for ISS Location Data

Content

View full analysis

Vulnerability Details

File Location: SKILL.md, line 14
Vulnerability Type: Plaintext external API communication
Risk Level: Low

Complete Code Snippet

bash

curl -s "http://api.open-notify.org/iss-now.json" | jq -r '"Lat: \(.iss_position.latitude), Lon: \(.iss_position.longitude)"'

Technical Analysis

The skill retrieves ISS position data over unencrypted HTTP. HTTP provides neither transport confidentiality nor server authenticity and does not protect response integrity. An attacker with a suitable network position could intercept the connection and replace the API response with attacker-controlled JSON.

The response is only parsed and displayed by jq; it is not evaluated as shell code. Therefore, the demonstrated issue enables data manipulation rather than arbitrary command execution. The request also omits options such as --fail and --show-error, reducing the reliability with which transport and HTTP failures are detected.

Attack Path

1. A user invokes the documented ISS-location command.
2. curl sends an unencrypted HTTP request to api.open-notify.org.
3. A network-positioned attacker intercepts or redirects the request.
4. The attacker returns syntactically valid JSON containing forged iss_position.latitude and iss_position.longitude values.
5. jq accepts those fields and displays the forged coordinates as the current ISS location.

Impact Assessment

Exploitation compromises the integrity and authenticity of the displayed ISS coordinates. An attacker can cause users or downstream workflows to consume false location data within the scope of this API result.

No credential disclosure, local privilege gain, persistence, arbitrary code execution, or broader host compromise is established by the audited content.

Remediation

View remediation

Remediation Suggestions

Replace the plaintext endpoint with a trusted HTTPS endpoint that provides equivalent ISS-position data. Configure curl to report and fail on transport and HTTP errors, and validate the expected JSON structure before using the values.

For example, if the provider supports HTTPS:

bash

curl --fail --silent --show-error "https://api.open-notify.org/iss-now.json" |
  jq -er '"Lat: \(.iss_position.latitude), Lon: \(.iss_position.longitude)"'

If that provider does not offer a valid HTTPS service, use a reputable alternative provider with authenticated TLS. Do not disable certificate verification. For stronger validation, ensure the latitude and longitude fields exist, are numeric, and fall within valid geographic ranges before displaying or forwarding them.

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 95% confidence

Finding

The skill makes an outbound network request to a third-party service over plain HTTP, which lacks transport encryption and server authentication. This exposes the response to tampering or interception by a man-in-the-middle and creates a privacy/integrity risk whenever the skill is run.

Content

Scanner excerpt · SKILL.md (reported line 14)May include surrounding context.

Current Location

To get the current position of the ISS, run this command:

bash

curl -s "http://api.open-notify.org/iss-now.json" | jq -r '"Lat: \(.iss_position.latitude), Lon: \(.iss_position.longitude)"'

Static analysis

No suspicious patterns detected.