T08 · Insecure Dependencies
Warning
- Location
SKILL.md:22- Finding
Unpinned Third-Party npm Dependency
- Content
View full analysis
- Remediation
View remediation
Security audit
Yahoo Finance CLI
Security checks for vulnerabilities and agentic risk
Overview
This Yahoo Finance skill is mostly purpose-aligned, but its install instructions can persistently modify a system-wide command path and use an unpinned npm package.
Review the install steps before using this skill. Prefer a user-local or project-local install, pin and audit yahoo-finance2, avoid sudo and forced /usr/local/bin symlinks unless you have verified the target binary and existing yf command, and understand that yahoo-finance2 may store cookies in ~/.yf2-cookies.json.
Vulnerability Patterns
- Tool Hijacking and SpoofingModifies or replaces tools so legitimate-looking calls execute attacker logic
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)
T07 · Tool Hijacking and Spoofing
Warning
- Location
SKILL.md:4- Finding
Forced Replacement of a System-Wide Tool Link
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)
Tool Parameter Abuse
High
- Category
- Tool Misuse
- Confidence
- 85% confidence
- Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
- Content
- If you see authentication or parsing errors, delete the cookie file and retry:
bash rm -f ~/.yf2-cookies.json yf quote AAPL
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The activation description says the skill should be used when the user asks to "get financial data" or "needs stock market data," which are broad natural-language triggers without clear boundaries or exclusion conditions. This increases the chance of unintended invocation for generic finance questions that may not specifically call for this CLI-based Yahoo Finance skill.
- Content
Sudo/Root Execution
Medium
- Category
- Privilege Escalation
- Confidence
- 94% confidence
- Finding
The documented use of sudo to create a symlink in /usr/local/bin requires elevated privileges and modifies a globally trusted executable path. Even though the command appears intended for setup, encouraging root-level execution in a skill increases the risk of privilege misuse, path hijacking, or unintended system modification if the binary path is incorrect or attacker-controlled.
- Content
bash brew install jq npm install yahoo-finance2 sudo ln -s /opt/homebrew/bin/yahoo-finance /usr/local/bin/yfUsage
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The skill includes installation and troubleshooting commands that make system changes, including privileged symlink creation and deletion of a local file, without explicit warnings or safer alternatives. In an agent context, normalizing such commands can lead users to perform risky actions they do not fully understand, potentially altering trusted paths or deleting the wrong file if adapted carelessly.
- Content
Static analysis
No suspicious patterns detected.