T08 · Insecure Dependencies
Warning
- Location
install.sh:17- Finding
Unpinned Third-Party Dependency Installation
- Content
View full analysis
- Remediation
View remediation
Security audit
Image Optimizer Tool
Security checks for vulnerabilities and agentic risk
Overview
This is a disclosed local image optimization tool with ordinary file-modification behavior, though users should note the unpinned dependency and backup-path bug.
Before installing, prefer running it in a virtual environment, pin or review the Pillow dependency, and use preview or output-dir first. Avoid running it from one directory while targeting images elsewhere until the backup path handling is fixed.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)
T09 · Insecure Skill Coding Practices
Note
- Location
source/image_optimizer.py:51- Finding
Backup Destination Path Can Escape the Intended Backup Directory
- Content
View full analysis
/`. 5. Filesystem path resolution processes the parent components and escapes the intended session backup directory. 6. `shutil.copy2()` writes the source image to the escaped destination, potential ...[truncated 528 chars]- Remediation
View remediation
Vulnerability Patterns
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 91% confidence
- Finding
The skill advertises file-processing behavior that necessarily reads and writes local files, but its manifest does not declare any explicit tool scope such as permissions or allowed-tools. This creates a least-privilege and transparency problem: a host or user cannot clearly assess or constrain what filesystem access the skill needs, increasing the chance of unintended file modification or abuse if the implementation is changed or invoked in an unsafe context.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
This code file contains natural-language strings that present the tool and its usage exclusively in Chinese. Under the policy, forcing a specific language without opt-in or a documented regional justification is a natural-language policy violation.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
This shell script presents all user-facing comments and console output in Chinese, including installation status, errors, and usage guidance. Under the policy for natural-language violations, forcing a specific language without user opt-in can be a locale-policy issue when no alternative or choice is provided.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The skill description is written entirely in Chinese, which implies a language-specific user experience without offering a language choice or documenting that the skill is intended only for a Chinese-speaking audience. Under the language/locale policy rule, this is a natural-language policy concern because the manifest does not indicate user opt-in or a justified region-specific constraint.
- Content