Security audit

eBay 电商图片生成与编辑

Security checks across malware telemetry and agentic risk

Overview

This skill is an AI Hive image-generation helper for eBay listing photos, with user-directed uploads and local API-key storage that are relevant to its purpose but should be understood before use.

Install only if you are comfortable sending selected product photos to AI Hive/Object Storage and storing an AI Hive API key locally. Avoid uploading photos containing private identifiers unless you intend to process them with this service.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (6)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 93% confidence
Finding: The skill invokes a Python script with network, shell, file read/write, environment access, and local credential setup behavior, yet the skill declares no permissions or trust boundaries. This creates a transparency and least-privilege problem: users or hosting agents may authorize or execute capabilities they were not clearly informed about, increasing the chance of unintended file access, network exfiltration, or shell misuse through the backing script.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: The documented purpose is narrow image generation/editing for eBay listings, but the referenced implementation reportedly also supports unrelated high-risk behaviors such as browser-based API-key setup, local credential storage, generic media upload, account/balance retrieval, model enumeration, video generation, and broad task polling. This mismatch is dangerous because it obscures the true attack surface and may cause users or orchestrators to trust and run a skill with substantially broader data access and external interactions than advertised.

Description-Behavior Mismatch

Medium

Confidence: 92% confidence
Finding: The published skill is framed as an eBay image-generation/editing tool, but the exposed skill interface also allows generic task inspection and arbitrary media upload. That scope mismatch increases the chance users will send unrelated local files or inspect tasks outside the narrow advertised purpose, which is a capability-expansion risk even if no obvious exploit code is present.

Context-Inappropriate Capability

High

Confidence: 95% confidence
Finding: The file embeds a general-purpose AI client with chat, model enumeration, user-info, media upload, and video-generation support despite being presented as a narrow eBay image skill. Hidden or bundled excess capability is dangerous because it broadens reachable behavior and data exposure if the script is repurposed, invoked differently, or later wired into agent tooling beyond the intended wrapper.

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The upload and download flow sends local media to remote services and retrieves remote results, but the user is not given a clear consent warning that local files leave the machine and are transmitted to external infrastructure. In a skill handling product photos and possibly identifiers or serial numbers, that can lead to unintentional disclosure of sensitive business or personal data.

Missing User Warnings

Medium

Confidence: 84% confidence
Finding: The init flow writes the API key to a persistent file on disk without prominently warning the user that credentials will be stored locally. Although the code sets restrictive permissions, silent persistence of secrets can still surprise users and increase exposure on shared, backed-up, or managed systems.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.