T08 · Insecure Dependencies
Warning
- Location
SKILL.md:34- Finding
Unpinned Third-Party SDK Dependency Creates Supply-Chain Risk
- Content
View full analysis
- Remediation
View remediation
Security audit
tencentcloud-faceid-detectlivefaceaccurate
Security checks for vulnerabilities and agentic risk
Overview
The skill appears to perform its stated Tencent Cloud face-liveness check, but it handles sensitive face images with under-disclosed remote processing and logs full image URLs.
Review before installing. Use only with images you are allowed to process through Tencent Cloud, prefer tightly scoped Tencent Cloud credentials, avoid long-lived or sensitive signed image URLs, and run it in an environment where stderr logs are not broadly retained or shared.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)
T09 · Insecure Skill Coding Practices
Note
- Location
scripts/main.py:216- Finding
Sensitive Image URL Is Logged to Standard Error Without Redaction
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 91% confidence
- Finding
The skill declares use of environment-based secrets (
TENCENTCLOUD_SECRET_IDandTENCENTCLOUD_SECRET_KEY) but does not declare any explicit tool scope, permissions, or allowed-tools boundary. This creates an authorization transparency gap: an agent or reviewer cannot easily tell that the skill needs secret access, increasing the risk of unintended secret exposure or overbroad execution in a larger agent framework.- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
This skill handles face images and image URLs, which are biometric and highly sensitive personal data, yet it does not warn users that their data will be transmitted to Tencent Cloud for remote processing. Without clear disclosure and consent language, users may unknowingly send sensitive biometric data to a third party, creating privacy, compliance, and trust risks that are especially serious given the data type.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The script transmits biometric data (face images) or user-supplied image URLs to Tencent Cloud for processing, but it does not present an explicit privacy notice, consent check, or clear warning at the point of transmission. Because facial images are sensitive personal data, silent upload can violate user expectations, internal policy, or privacy/legal requirements, especially when the skill is invoked by another agent on a user's behalf.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 86% confidence
- Finding
All user-facing documentation is written in Chinese and the skill does not indicate whether another language is supported or whether Chinese is required for a region-specific reason. Under the language/locale policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the constraint is clearly justified.
- Content