Security audit

chart-free

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly a local chart generator, but it asks for API-key setup and defines an external callback parameter while repeatedly saying it is offline and local-only.

Review this before installing if you need strict offline behavior. Avoid providing a callback URL or sensitive chart data unless the publisher clarifies whether network requests occur, what data is sent, and why an API key is required for a local matplotlib workflow.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Intent-Code Divergence

Medium

Confidence: 95% confidence
Finding: The skill repeatedly claims all data stays local and no networking is used, yet it defines a callback_url parameter for asynchronous notification. That mismatch can mislead users into supplying sensitive data under a false local-only assumption, and any implementation honoring the callback could exfiltrate metadata or results to an external endpoint.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: Documenting a callback URL without warning that it may send data to an external endpoint creates a meaningful privacy and trust risk. In this skill’s context, the danger is heightened because the surrounding text repeatedly markets the tool as local-only and offline, which may cause users to underestimate the risk of outbound data transmission.

Static analysis

No suspicious patterns detected.