T08 · Insecure Dependencies
Warning
- Location
README.md:14- Finding
Unpinned Remote Skill Installation and Package Execution
- Content
View full analysis
- Remediation
View remediation
Security audit
PatentFig AI Patent Drawing
Security checks for vulnerabilities and agentic risk
Overview
The skill does what it says, but users should understand that patent prompts and files may be sent to PatentFig AI and that the README install commands are not pinned to an immutable version.
Before installing, confirm you trust PatentFig AI and are allowed to send any invention descriptions, drawings, images, or files to that service. Prefer installing from a pinned release or reviewed commit rather than the mutable README commands, and keep the API key in an environment variable as instructed.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
- Content
External Transmission
Medium
- Category
- Data Exfiltration
- Confidence
- 60% confidence
- Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
- Content
Verify connectivity and credit balance (free call):
bash curl -s https://patentfig.ai/api/v1/credits \ -H "Authorization: Bearer $PATENTFIG_API_KEY" # → { "success": true, "data": { "balance": 500 } }
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The endpoint reference documents uploading local files and submitting image URLs to a third-party API, but it does not warn users that their content will be transmitted off-platform to an external service. In a patent-drawing workflow, inputs may contain confidential invention details, unpublished application material, or sensitive diagrams, so the omission can cause unintentional disclosure and privacy/compliance issues.
- Content