Security audit

black-friday-deal-detector

Security checks for vulnerabilities and agentic risk

Overview

This skill offers a local price calculator and shopping checklist, with no hidden access, purchases, or background activity.

Treat results as estimates. Supply verified current prices and historical lows, and check price timelines and coupon conditions separately. The calculator assumes gift cards are worth 50% and allocates only 30% of a membership fee to the purchase.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Description-Behavior Mismatch

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: The code implements the core deal-comparison purpose and can flag potentially inflated MSRP anchors, but the description materially overstates its analytical coverage. It accepts a historical-low value rather than examining a price timeline, cannot evaluate coupon stacking, and substitutes static category heuristics for 12-month price bands. There are no apparent undeclared resource accesses or unrelated behaviors.
Content: No source excerpt is available for this finding.

The manifest promises pre-sale price-inflation and coupon-stacking detection, but the code only evaluates supplied price snapshots.

Medium

Category: Excessive Agency
Confidence: 96% confidence
Finding: The manifest explicitly claims detection of pre-sale price inflation and coupon-stacking theater. However, analyze() at L030–L047 only compares MSRP, sale, street, and historical-low values with gift-card and membership adjustments; the CLI at L133–L139 supplies neither dated price history nor coupon-stack terms, so these advertised checks are not implemented.
Content: No source excerpt is available for this finding.