Security audit

Ainative Nextjs Sdk

Security checks for vulnerabilities and agentic risk

Overview

This skill is coherent for building an AINative chat app, but its examples expose a server-funded chat API publicly without showing basic abuse, validation, or privacy controls.

Review before installing or using these examples in production. Pin the SDK version, verify the package source and publisher, protect or rate-limit /api/chat, validate request bodies and token usage, add quotas and monitoring, and clearly disclose that chat content is sent to AINative or its upstream model provider.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:10
Finding: Unpinned Third-Party SDK Receives API Credentials and User Data
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:20
Finding: Unauthenticated Public Chat Route Allows Abuse of Server-Side API Credentials
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Credential Access

High

Category: Privilege Escalation
Confidence: 60% confidence
Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
Content: Scanner excerpt · SKILL.md (reported line 142)May include surrounding context.
Environment Variables

bash
# .env.local AINATIVE_API_KEY=ak_your_key

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: This markdown file documents server routes and client code that collect messages from users and transmit them via client.chat.completions.create(...) to an external AI service, but it does not warn users that chat content will leave their application environment. For markdown files, SQP-2 applies when the description omits warnings about behaviors affecting user data or privacy.
Content: No source excerpt is available for this finding.