Security audit

Chatbot Personality Set

Security checks for vulnerabilities and agentic risk

Overview

This skill is a small React integration guide that asks users to install and import a UI package, with no hidden execution or persistence in the artifact itself.

Before installing, treat orbcafe-ui like any third-party npm dependency: pin an exact version, commit a lockfile, review the package and its lifecycle scripts, and install in an environment without unnecessary secrets.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:21
Finding: Unpinned Third-Party Package Installation
Content: View full analysis
Remediation: View remediation
# or pnpm add --save-exact orbcafe-ui@ ``` 2. Commit the generated lockfile and require deterministic installation with `npm ci` or `pnpm install --frozen-lockfile`. 3. Review the package's source, maintainer history, transitive dependencies, and lifecycle scripts before approving it. 4. Validate package integrity through the lockfile and trusted registry controls. 5. Run dependency installation in a restricted environment without production secrets or unnecessary filesystem permissions. 6. Add automated dependency and supply-chain scanning to detect compromised, deprecated, or unexpectedly changed packages. 7. Establish a controlled update process so new versions are reviewed and tested before adoption. ]]>

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.