T08 · Insecure Dependencies
Warning
- Location
SKILL.md:12- Finding
Unpinned Third-Party Package Installation
- Content
View full analysis
- Remediation
View remediation
Security audit
nostrkey
Security checks for vulnerabilities and agentic risk
Overview
This skill matches its Nostr identity purpose, but its documented workflows can expose recovery secrets and create weakly protected identity files.
Install only if you are prepared to handle it as a high-sensitivity identity tool. Do not paste seed phrases or passphrases into chat, do not run the example unchanged, avoid the `change-me` passphrase, and treat any seed phrase shown in chat or logs as compromised. Prefer a secure local secret-entry path, restrict filesystem and network access, and pin or verify the installed package before relying on it.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (3)
T09 · Insecure Skill Coding Practices
Error
- Location
SKILL.md:113- Finding
Seed Phrases Are Transmitted and Repeated Through Chat
- Content
View full analysis
- Remediation
View remediation
T09 · Insecure Skill Coding Practices
Error
- Location
examples/generate_and_post.py:35- Finding
Private Identity File Uses a Publicly Known Hardcoded Passphrase
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill tells the operator to paste a 12- or 24-word seed phrase directly into chat, which can permanently expose the master secret in conversation history, logs, analytics systems, or UI transcripts. A seed phrase fully controls the identity, so disclosure enables total account takeover, impersonation, and decryption of messages tied to that identity.
- Content
Description-Behavior Mismatch
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The manifest description focuses on local identity primitives: key generation, signing, encryption, seed phrases, and backup tokens. In contrast, this skill file instructs use of a relay client over
wss://to publish events to the network, which is a broader operational capability than an identity SDK alone.- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The example saves long-lived identity key material to disk using a hardcoded placeholder passphrase ('change-me'). In practice, users often copy example code verbatim, so this creates a realistic risk that private keys are protected with a trivially guessable secret and can be recovered if the file is accessed by another local user, malware, backup compromise, or source control leak.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The manifest advertises generation, persistence, encryption, and backup of cryptographic identity material, and requires an environment passphrase, but it provides no safety guidance about secret handling, storage, rotation, logging avoidance, or recovery risks. In an AI-agent context, unclear handling expectations can lead operators or downstream tooling to expose seed phrases, private keys, or passphrases through environment variables, logs, backups, or prompts.
- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 79% confidence
- Finding
The markdown shows how to publish an event to a relay over the network, but it does not explicitly warn that this transmits content and metadata to an external service. Because publishing affects privacy and data exposure, the skill description should disclose that behavior near the example.
- Content
Static analysis
No suspicious patterns detected.