Sophiie AI Office Manager

• Outcome: Review
• Latest audit: Sep 10, 2026 · 8:28 PM UTC
• Version: 0.0.3

Overview

This skill appears legitimate and purpose-aligned, but it can send real SMS/calls and change customer or business records with incomplete safety controls.

Review this before installing if the API key has production permissions. Use a least-privilege or sandbox key where possible, and require human confirmation before sending SMS/calls or changing/deleting leads, FAQs, and policies.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (35)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The README advertises high-impact capabilities such as sending SMS/calls and deleting records, but it does not warn that these actions can contact real customers or irreversibly alter business data. In an agent-driven context, unclear safety boundaries increase the chance of unintended destructive or user-impacting actions through prompt misunderstanding, automation mistakes, or overbroad permissions.

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 92% confidence
• Finding: The skill declares shell capability via required binaries and a referenced script, but it does not define any explicit tool scope such as permissions or allowed-tools. In an agent environment, that broadens ambiguity around what execution surface is authorized and can enable over-privileged shell use beyond what the metadata makes clear.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Method | URL | Data Sent |
|--------|-----|-----------|
| GET | `https://api.sophiie.ai/v1/leads` | Query: page, limit |
| GET | `https://api.sophiie.ai/v1/leads/{id}` | None |
| POST | `https://api.sophiie.ai/v1/leads` | Body: firstName, lastName, email, phone, suburb, businessName, socials |
| PUT | `https://api.sophiie.ai/v1/leads/{id}` | Body: firstName, lastName, email, phone, suburb, businessName, socials |

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Static analysis

No suspicious patterns detected.