Security audit

Track houses for sale on a private map

Security checks for vulnerabilities and agentic risk

Overview

This skill coherently helps users save property listings to a local private map, with its browser, network, and local storage behavior disclosed and purpose-aligned.

Install only if you are comfortable with the skill using Plow Browser to open listing pages, contacting geocoding/image/map services, and keeping property data locally in ~/Plow/properties. Treat that folder as private because it may reveal homes you are considering and your notes or ratings.

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 91% confidence
Finding: The skill clearly instructs the agent to invoke shell commands, use a browser-backed network scraper, and access host-mounted storage, but it does not declare permissions up front. That mismatch is dangerous because users and policy layers may not understand the skill's true capabilities, reducing informed consent and weakening guardrails around filesystem, network, and command execution.

Missing User Warnings

Low

Confidence: 84% confidence
Finding: The skill persistently writes scraped listings, notes, ratings, and map files into a host-mounted folder that is visible outside the container, but it does not require an explicit warning or confirmation before creating or modifying those files. This can surprise users, expose sensitive house-hunting data on disk, and create privacy or integrity issues if the user did not intend persistent local storage.

Static analysis

Detected: suspicious.dangerous_exec, suspicious.dynamic_code_execution

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/properties.test.ts:29

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/scrape.test.ts:124

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: scripts/scrape.test.ts:26