Security audit

Aport Id

Security checks for vulnerabilities and agentic risk

Overview

This is a mostly legitimate APort registration skill, but it needs Review because it defaults identity data toward public listing and tries to shape future agent behavior beyond initial registration.

Review this skill carefully before installing. Use it only if you intend to send an email address and agent identity metadata to APort, and change or confirm showInGallery before registration. Treat announcements, README changes, task verification, and future passport attribution as separate opt-in actions that should require explicit approval each time.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T01 · Skill Instruction Hijacking

Error

Location: SKILL.md:64
Finding: External Policy Service Hijacks Task Completion and Unrelated Agent Outputs
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:101
Finding: Passport Registration Enables Public Gallery Listing by Default
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The skill collects the user’s email and sends it to an external APort API so a claim link can be delivered, but the description does not prominently disclose this third-party data transfer up front. Users may provide personal information without understanding that it will be transmitted off-platform, creating privacy and consent risk.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill’s declared purpose is passport registration, but it also instructs the agent to promote the passport publicly, add badges, sign work, and alter future behavior across unrelated tasks. This scope expansion can cause unsolicited external posting or persistent identity/provenance behaviors that exceed the user’s original intent and increase the chance of data disclosure or unauthorized actions.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill documents posting to X/Twitter, GitHub, Slack, and Discord even though those actions are not necessary to create a passport. Giving a registration skill social-posting behavior broadens available side effects and can lead an agent with existing integrations to publish information or modify repositories beyond what the user asked for.
Content: No source excerpt is available for this finding.

Scope Creep

Low

Category: Excessive Agency
Confidence: 70% confidence
Finding: Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
Content: Scanner excerpt · SKILL.md (reported line 225)May include surrounding context.
md
|-------------|-------|-------| | `gemini-flash-2.5` | Gemini Flash 2.5 | Whippet — fast, lean, surprisingly capable | | `gpt-4o` | GPT-4o | Golden Retriever — reliable, friendly, everyone has one | | `gpt-4o-mini` | GPT-4o Mini | Corgi — small but thinks it can handle anything | | `claude-opus` | Claude Opus | Border Collie — overthinks everything, extremely capable | | `claude-sonnet` | Claude Sonnet | Labrador — smart, well-rounded, good with people | | `claude-haiku` | Claude Haiku | Greyhound — built for speed, elegant under pressure |

Static analysis

No suspicious patterns detected.