Security audit

TopYappers - Creators & Viral Content Skills

Security checks for vulnerabilities and agentic risk

Overview

TopYappers is a coherent social media intelligence skill that uses a disclosed external MCP API, with privacy care needed for creator emails and demographics.

Before installing, confirm you trust TopYappers with your API key and intended queries. Treat creator emails and demographic fields as personal data: retrieve only what you need, avoid unnecessary storage or redistribution, and follow platform rules and applicable privacy laws. Also monitor credit costs because several tools charge per result or request.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The skill explicitly advertises get_creator_profiles as returning full profiles including email addresses, but the top-level skill description does not warn users that invoking this capability may retrieve personal contact data. In a social-media intelligence context, omission of a privacy notice increases the risk that agents or users will collect or expose personal data without informed consent, appropriate minimization, or policy checks.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The manifest says to use the skill for "any creator-related query," which is a very broad trigger that can overlap with many ordinary discovery or marketing requests. It does not provide exclusion conditions or clearer boundaries for when this skill should or should not activate.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill explicitly instructs retrieval of full creator profiles including email and other profile attributes without any privacy guidance, minimization requirements, or user-warning language. This creates a real risk of unnecessary collection and exposure of personal contact data, especially because the workflow encourages bulk profile enrichment after free searching.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The invocation guidance says to use the skill when the user asks about "trending music, viral sounds, chart rankings, song performance, or wants a music trends report." Several of these phrases are broad and there are no exclusion conditions or negative examples, which could cause the skill to activate for general music discussion rather than explicit chart-data requests.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.