Security audit

Media Sync

Security checks for vulnerabilities and agentic risk

Overview

This skill coherently downloads user-provided media into a fixed media folder and tracks progress, with disclosed but privacy-relevant temporary logs.

Install only if you are comfortable giving the skill write access to /mnt/jellyfin_media and allowing progress files in /tmp. Avoid using private or tokenized media URLs on shared machines unless temporary-file access is controlled, and confirm the destination folder carefully before downloads.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

Confidence: 94% confidence
Finding: The script prints the destination path and, for failed or pending items, the full source URL directly into its status output. In an agent setting, that output may be surfaced to users, logs, or other components, unintentionally disclosing filesystem layout and media source details that may contain private hosts, tokens, query strings, or other sensitive identifiers.

Static analysis

No suspicious patterns detected.