Security audit

NAS Dashboard

Security checks for vulnerabilities and agentic risk

Overview

This NAS monitoring skill is broad and privacy-sensitive, but its collection, sudo reads, formatting, and optional Telegram delivery fit the stated dashboard purpose and are mostly disclosed.

Install only if you want a fairly complete NAS/HomeLab audit. Review the report before sending it to Telegram because it may include hostnames, IP addresses, open ports, failed login counts, service names, Docker details, and disk health information. Configure passwordless sudo narrowly if you enable the privileged checks, and avoid broad trigger phrases or automatic cron delivery unless you are comfortable with that recurring collection.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (4)

Intent-Code Divergence

Medium

Confidence: 91% confidence
Finding: The header frames the script as a simple data collector, but the body performs substantially broader inspection, including security posture checks, login history, firewall state, open ports, SSH policy, SMART data, and other privileged/system-sensitive enumeration. That mismatch is dangerous because operators or downstream agents may grant trust or execute it under the assumption that it only gathers innocuous formatting data, leading to over-collection of sensitive telemetry without informed consent.

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The trigger list includes very generic phrases like "server status", "system dashboard", and Chinese equivalents that are likely to overlap with normal user requests. This can cause the skill to activate unexpectedly in contexts where the user did not intend a full NAS audit, increasing the chance of unnecessary system inspection and disclosure of sensitive host data.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill advertises Telegram delivery and broad collection of system, security, network, and service state, but does not clearly warn users that the generated report may contain sensitive operational data such as hostnames, IPs, open ports, failed login counts, and storage/service details. If sent to Telegram without informed consent or sanitization, this could expose internal infrastructure information to third parties or insecure chat destinations.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The script collects privileged disk health and security-relevant device data via sudo without clear disclosure or gating. In an agent-skill context, this expands the data-access scope beyond ordinary system stats and can expose serial numbers, health state, and low-level hardware details that users may not expect to share.

Static analysis

No suspicious patterns detected.