Security audit

gitload

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent GitHub-download helper, but it asks users to run mutable third-party npm code and shows credential-handling patterns that need review before use.

Install only if you are comfortable reviewing the npm package and downloaded repository before execution. Prefer GitHub CLI authentication, avoid putting real tokens directly in commands, use least-privilege short-lived tokens, pin or verify package versions where possible, and inspect downloaded package.json files before running npm install.

A.I.G

Vulnerability Patterns

Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions

Findings (3)

T08 · Insecure Dependencies

Error

Location: SKILL.md:29
Finding: Unpinned Third-Party CLI Is Downloaded and Executed
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:75
Finding: GitHub Personal Access Token Can Be Exposed Through Command-Line Arguments
Content: View full analysis
Remediation: View remediation

T03 · Remote Payload Retrieval and Execution

Error

Location: SKILL.md:101
Finding: Downloaded Repository Content Is Immediately Passed to npm Install
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill demonstrates passing a GitHub personal access token directly on the command line and exporting an example token value, but does not warn that CLI arguments and shell history can expose secrets to other local users, logs, or process inspection tools. In a skill intended to be copied verbatim by users, this increases the chance of credential leakage through normal operational use rather than requiring an active attacker in the skill itself.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.