my skill demo showcase

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 3:18 AM UTC
• Version: 0.0.1

Overview

This is a small TypeScript demo skill with one minor under-documented extra script and ordinary npm supply-chain considerations.

Before installing, treat it as a demo npm package: review the small source files, prefer installing with a lockfile or pinned versions if reproducibility matters, and note that embedding-demo.ts is present even though the main skill documentation focuses on hello.ts.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (6)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence

Finding

The description says this is a minimal hello-world TypeScript skill focused on bundling TS code, a Node dependency, and package.json instructions for publication. The supplied code instead provides functional text-to-vector logic and vector similarity computation. There is no hello-world behavior, no bundling/package publication logic, and no demonstration of a Node dependency in this code chunk. This is a material description-to-behavior mismatch in primary purpose and capabilities.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 70% confidence

Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 70% confidence

Finding

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Content

No source excerpt is available for this finding.

Unpinned Dependencies

Low

• Category: Supply Chain
• Confidence: 40% confidence

Finding

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

Content

Scanner excerpt · package.json (reported line 11)May include surrounding context.

json

"start": "ts-node scripts/hello.ts"
  },
  "dependencies": {
    "dayjs": "^1.11.13"
  },
  "devDependencies": {
    "ts-node": "^10.9.2",

Unpinned Dependencies

Low

• Category: Supply Chain
• Confidence: 40% confidence

Finding

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

Content

Scanner excerpt · package.json (reported line 14)May include surrounding context.

json

"dayjs": "^1.11.13"
  },
  "devDependencies": {
    "ts-node": "^10.9.2",
    "typescript": "^5.7.0"
  }
}

Unpinned Dependencies

Low

• Category: Supply Chain
• Confidence: 40% confidence

Finding

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

Content

Scanner excerpt · package.json (reported line 15)May include surrounding context.

json

},
  "devDependencies": {
    "ts-node": "^10.9.2",
    "typescript": "^5.7.0"
  }
}

Static analysis

No suspicious patterns detected.