Security audit

Whop Digital Store

Security checks for vulnerabilities and agentic risk

Overview

The skill is openly about Whop store automation, but it covers API-key use, product creation, customer delivery, and affiliate payouts without clear approval boundaries.

Install only if you intend to let an agent assist with Whop store operations. Use a least-privilege API key where possible, keep the key out of prompts/logs/files, and require manual review before creating products, sending access links, or paying affiliates.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Ae1

High

Category: analysis-evasion
Content: - `SKILL.md` — this file
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected

Vague Triggers

Medium

Confidence: 89% confidence
Finding: The skill is described in broad, open-ended terms such as building and automating a digital store, without clear limits on when it should be used, what actions require confirmation, or what it must not do. In an agent setting, this can cause overbroad activation and lead to unintended external actions like product creation, payouts, or customer-facing automation based on ambiguous user prompts.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The setup instructions tell the user to store a WHOP_API_KEY and enable automation that can create products, deliver licenses, and pay affiliates, but they do not warn about the sensitivity of credentials or the risks of automated external actions. This increases the chance of unsafe deployment, accidental financial actions, or credential misuse if the skill is invoked carelessly or by a confused agent workflow.

Static analysis

No suspicious patterns detected.