Security audit

gitea

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Gitea CLI reference, but users should be careful because some examples can delete repositories, merge code, create secrets, or send webhook data externally.

Install only if you intend to let the agent use your authenticated tea CLI. Before destructive or state-changing operations, explicitly confirm the target repository, PR, merge style, webhook destination, and secret scope; treat CLI credentials and secrets as sensitive.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The skill explicitly documents a forceful repository deletion command with no warning, confirmation guidance, or recommendation to verify the target repository first. In an agent skill context, this increases the chance of accidental destructive actions against real repositories, causing irreversible data loss or service disruption.

Missing User Warnings

Low

Confidence: 81% confidence
Finding: The skill provides a PR merge command without noting that it mutates repository state and may trigger downstream automation such as deployments or branch protections. While merging is a normal operation, omission of caution in an agent-facing skill can lead to unintended code integration or release flow changes.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The skill shows creating action secrets without any guidance on sensitive credential handling, scoping, or avoiding exposure in prompts, logs, and shell history. In an agent environment, this can encourage unsafe secret entry or storage practices that expose credentials to unintended systems or users.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The skill documents webhook creation to an arbitrary external URL without warning that repository events and metadata will be transmitted off-platform. This can enable unintended data exfiltration, leakage of internal workflow details, or event forwarding to untrusted endpoints if used carelessly.

Static analysis

No suspicious patterns detected.