Security audit

isp-api-tester

Security checks for vulnerabilities and agentic risk

Overview

This looks like a real API/database testing skill, but it includes hardcoded credentials and can write sensitive live test data into local reports without enough safeguards.

Install only after removing and rotating any exposed credentials, replacing examples with placeholders, and confirming the script targets only approved test environments. Use synthetic or masked fixture data where possible, and treat generated reports as sensitive because they may contain raw requests, responses, identifiers, tokens, or business data.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Context-Inappropriate Capability

High

Confidence: 99% confidence
Finding: The document exposes plaintext platform credentials, database access details, and other sensitive connection information directly in the skill. Anyone with access to the skill can reuse those secrets to access external systems, query real data, and potentially pivot into broader environment compromise or data exfiltration.

Missing User Warnings

High

Confidence: 98% confidence
Finding: The sample configuration embeds plaintext app credentials and authentication material without any handling warning, encouraging operators to copy real secrets into local files. Those files are then likely to be reused, stored in working directories, or checked into source control, causing credential leakage and unauthorized API access.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The skill description says it fetches real test data from a database and executes API tests, but it does not warn that real data may be transmitted over the network and included in generated artifacts. In this context, that omission is significant because the skill explicitly combines database access, external API calls, and report generation, increasing the risk of unintentional data exposure.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The skill loads real database records via db_fixture and later serializes full request bodies and response bodies into JSON/JS/HTML report artifacts without redaction or confirmation. In a testing context this is especially risky because production-like identifiers, invoice data, credentials, or personal/business data can be exfiltrated to disk and then further exposed through shared reports.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The script transmits usernames, derived passwords, client secrets, tokens, and test payloads to remote endpoints with no explicit disclosure or user confirmation at send time. While outbound transmission is expected for an API tester, the absence of warning, destination validation, and safe-use prompts increases the risk of accidental credential disclosure to the wrong host or environment.

Static analysis

No suspicious patterns detected.