Security audit
Security checks for vulnerabilities and agentic risk
This group-chat skill is mostly coherent, but it gives agents broad messaging and group-management powers without enough scoping or confirmation guidance.
Review before installing. Use it only if you want an agent to operate authenticated Aicoo group chats, and require explicit confirmation before sending messages, searching outside group conversations, creating invite links, changing settings, inviting or removing members, or using contacts/network data to find people.
The trigger list includes broad phrases such as 'join group', 'team chat', and 'group conversation', which may match ordinary discussion and cause unintended invocation of a skill that performs real messaging and membership actions. Because the skill can create groups, invite members, and generate links, over-broad activation raises the risk of accidental external actions.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST "https://www.aicoo.io/api/v1/agent/message" \
-H "Authorization: Bearer $AICOO_API_KEY" \
-H "Content-Type: application/json" \
-d '{
The skill is presented as a group-chat helper, but it documents view=all and cross-conversation search that can enumerate and search messages outside group contexts. That scope expansion increases the chance an agent will access unrelated direct or shared-agent conversations without an explicit user request, creating an over-privileged data access path.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST "https://www.aicoo.io/api/groups" \
-H "Cookie: better-auth.session_token=<SESSION>" \
-H "Content-Type: application/json" \
-d '{
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X PATCH "https://www.aicoo.io/api/groups/1" \
-H "Cookie: better-auth.session_token=<SESSION>" \
-H "Content-Type: application/json" \
-d '{
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST "https://www.aicoo.io/api/groups/1/messages" \
-H "Cookie: better-auth.session_token=<SESSION>" \
-H "Content-Type: application/json" \
-d '{
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST "https://www.aicoo.io/api/groups/1/invites" \
-H "Cookie: better-auth.session_token=<SESSION>" \
-H "Content-Type: application/json" \
-d '{
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Accept
curl -s -X POST "https://www.aicoo.io/api/groups/invites/42" \
-H "Cookie: better-auth.session_token=<SESSION>" \
-H "Content-Type: application/json" \
-d '{ "action": "accept" }' | jq .
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Accept
curl -s -X POST "https://www.aicoo.io/api/groups/invites/42" \
-H "Cookie: better-auth.session_token=<SESSION>" \
-H "Content-Type: application/json" \
-d '{ "action": "accept" }' | jq .
The skill documents generation of a public join link without warning that possession of the token may allow anyone to join the group. In a messaging context, that can expose private conversations to unintended parties if the link is shared, logged, or pasted into the wrong channel.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST "https://www.aicoo.io/api/groups/join-link" \
-H "Cookie: better-auth.session_token=<SESSION>" \
-H "Content-Type: application/json" \
-d '{ "token": "abc123..." }' | jq .
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
-H "Cookie: better-auth.session_token=<SESSION>" | jq .
# Update settings (admin only)
curl -s -X PATCH "https://www.aicoo.io/api/groups/1/settings" \
-H "Cookie: better-auth.session_token=<SESSION>" \
-H "Content-Type: application/json" \
-d '{
The practical guidance tells the agent to find user IDs from contacts or network, which broadens the skill from group management into discovery of people and identifiers. In context, this can enable unsolicited enumeration of users and assembling groups without clear user authorization for accessing contacts/network data.
The documentation treats member removal and leaving a group as routine actions without warning that they change membership and may transfer ownership or revoke access. This increases the chance of accidental administrative changes in a multi-party communication setting.
No suspicious patterns detected.