17track package tracking

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed 17TRACK parcel-tracking helper that uses a local database and 17TRACK API access for its stated purpose.

Install only if you are comfortable giving the skill a 17TRACK API token and keeping parcel tracking history in the workspace. Prefer polling unless you need webhooks. If you expose the webhook server, keep it bound behind a trusted endpoint and understand that malformed or spoofed webhook payloads may still be ingested into the local database.

SkillSpector

By NVIDIA

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 94% confidence
Finding: The skill clearly uses sensitive capabilities including environment variables, filesystem read/write, and outbound network access, but does not declare any permissions in the skill manifest. This creates a transparency and policy-enforcement gap: an agent or reviewer may treat the skill as lower-privilege than it actually is, while the code can access API tokens, persist data locally, and communicate with external services.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal