Security audit

dida365-ticktick-agent

Security checks for vulnerabilities and agentic risk

Overview

The skill matches its Dida365 task-management purpose, but it gives unsafe instructions for installing a global tool and handling account cookies and secrets.

Review before installing. Use a pinned, trusted version of the CLI if possible, avoid putting real cookies or OAuth secrets directly in shell commands or wrapper scripts, check where the CLI stores credentials, and rotate/revoke any cookie or secret that has been exposed in shell history, files, logs, backups, or repositories.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (3)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:15
Finding: Unpinned Third-Party Package Installed Globally
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:40
Finding: Dida365 Session Cookie Exposed Through Command-Line Arguments
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:96
Finding: OAuth Credentials Embedded in a PATH Wrapper Script
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill instructs users to extract a browser cookie and store authentication material via environment variables/CLI commands, but provides no warning about the sensitivity of those secrets, their storage location, shell history exposure, or the risk of account takeover if leaked. In this context, the cookie appears sufficient for authentication, so mishandling it could directly expose the user's Dida365 account.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The wrapper-script example hardcodes sensitive credentials into a shell script and tells users to place it on PATH, which can leave secrets readable by other local users, backups, repo commits, or system tooling. Embedding long-lived credentials in plaintext files materially increases the chance of credential leakage and downstream account compromise.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.