T05 · Unauthorized Access and Privilege Escalation
Error
- Location
index.py:18- Finding
Fail-Open Channel Authorization Allows Unrestricted Agent Access
- Content
View full analysis
- Remediation
View remediation
Security audit
Discord Bridge
Security checks for vulnerabilities and agentic risk
Overview
This Discord bridge appears purpose-built, but it needs Review because misconfiguration can let broad Discord audiences invoke Agent Zero with the bridge's API authority and can send messages plus credentials to configurable HTTP endpoints.
Install only if you will run it in a dedicated, approved Discord channel, set DISCORD_CHANNEL_IDS explicitly, use a least-privileged Agent Zero API key, keep the Agent Zero endpoint local or HTTPS-only, and make channel users aware their messages are forwarded to Agent Zero.
Vulnerability Patterns
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Findings (3)
T09 · Insecure Skill Coding Practices
Warning
- Location
index.py:15- Finding
API Credential and Message Data May Be Transmitted Over Plaintext HTTP
- Content
View full analysis
- Remediation
View remediation
T08 · Insecure Dependencies
Note
- Location
SKILL.md:43- Finding
Unpinned Third-Party Dependencies Create Supply-Chain and Reproducibility Risk
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 60% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
md pip install discord.py aiohttp python-dotenv # Configure environment cp .env.example .env # Edit .env with your credentials # Run the bridge
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 60% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
md pip install discord.py aiohttp python-dotenv # Configure environment cp .env.example .env # Edit .env with your credentials # Run the bridge
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 92% confidence
- Finding
The skill declares network and environment-backed behavior but does not specify any explicit tool scope or permission boundaries. This is risky because the skill is designed to read credentials from environment variables and forward Discord content over HTTP, yet users are not given a machine-readable restriction model limiting those capabilities.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill functionality forwards Discord messages to an HTTP API, but the description does not clearly warn users that chat content will leave Discord and be transmitted to another service. This can cause unintentional disclosure of sensitive messages, tokens, internal discussions, or personal data if deployed in the wrong channels.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The bridge forwards arbitrary Discord message content to an external HTTP API without any in-channel notice, consent flow, or clear indication to users that their messages are being relayed outside Discord. This can expose sensitive or private content unexpectedly, especially if the bot is present in semi-private channels, and the skill context makes this more dangerous because message bridging is its core behavior rather than an incidental side effect.
- Content
Static analysis
No suspicious patterns detected.