T09 · Insecure Skill Coding Practices
Error
- Location
SKILL.md:59- Finding
Potential Command Injection Through Unvalidated WHOIS Input
- Content
View full analysis
` or use `https://who.is/` 2. Find "Registrar Abuse Contact Email" 3. Send abuse email with phishing URL and description ``` ### Technical Analysis The Skill directs the Agent to substitute a domain derived from a user-provided URL into the shell command `whois `. It does not require the Agent to parse the URL with a structured URL parser, validate the resulting hostname, reject shell metacharacters, or execute WHOIS without a shell. If the Agent implements this instruction using shell-string interpolation, a crafted domain value containing command separators, substitutions, redirections, or whitespace may be interpreted as shell syntax rather than as a single WHOIS argument. The vulnerability therefore occurs at the boundary between attacker-controlled URL input and command execution. The issue is conditional on the Agent invoking the command through a shell. Using an argument-array process API without a shell would substantially reduce the risk, but the Skill does not impose that requirement. ### Attack Path 1. An attacker asks the Agent to report an allegedly malicious URL. 2. The supplied value contains shell syntax, such as a command separator or command substitution, while being presented as the domain to inspect. 3. The Agent follows the Skill and constructs a command equivalent to `whois `. 4. The Agent passes the interpolated string to a shell. 5. The shell interprets the injected syntax and executes the attacker's additional command. 6. The injected command runs with the operating-system permissions and environment access available to the Agent process. ### Impact Assessment Successful exploitation could e ...[truncated 524 chars]- Remediation
View remediation