Security audit
Security checks for vulnerabilities and agentic risk
The profile updater fits its purpose, but a bundled legacy renderer can automatically download and run extra software with access to available GitLab credentials.
Review the legacy npm fallback before use: prefer a preinstalled renderer and remove automatic package fetching. Verify the separately supplied production plugin before enabling scheduled publishing. Restrict GitLab access to intended projects, confirm the destination repository, and review generated assets. Public output intentionally includes aggregated private activity. This review found no artifact-backed basis for a malicious verdict.
Without declared permissions the skill's intent is opaque and cannot be validated.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def glab_json(path: str) -> object:
try:
result = subprocess.run(
["glab", "api", path],
check=True,
text=True,
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
def glab_json(path: str) -> object:
try:
result = subprocess.run(
["glab", "api", path],
check=True,
text=True,
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def current_user() -> str:
result = subprocess.run(
[
"glab",
"api",
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
webp_output.parent.mkdir(parents=True, exist_ok=True)
magick = shutil.which("magick")
if magick:
subprocess.run([magick, str(svg_output), str(webp_output)], check=True)
return
convert = shutil.which("convert")
if convert:
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
webp_output.parent.mkdir(parents=True, exist_ok=True)
magick = shutil.which("magick")
if magick:
subprocess.run([magick, str(svg_output), str(webp_output)], check=True)
return
convert = shutil.which("convert")
if convert:
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
return
convert = shutil.which("convert")
if convert:
subprocess.run([convert, str(svg_output), str(webp_output)], check=True)
return
npm = shutil.which("npm")
if npm:
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
return
convert = shutil.which("convert")
if convert:
subprocess.run([convert, str(svg_output), str(webp_output)], check=True)
return
npm = shutil.which("npm")
if npm:
The fallback silently permits downloading and executing an unpinned sharp-cli package through npm exec --yes rather than requiring an existing renderer. This creates a supply-chain execution path with the script's filesystem access and inherited authentication environment; being a legacy reference lowers exposure, but not the potential consequence if run.
Unlike the other subprocess calls, this fallback invokes npm exec --yes with an unpinned package, allowing npm to fetch and execute code when a suitable local package is unavailable. Compromised package code or installation scripts could access inherited credentials and workspace files; the documented legacy-only status reduces normal exposure but does not make direct invocation safe.
return
npm = shutil.which("npm")
if npm:
subprocess.run(
[
npm,
"exec",
Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.
return
npm = shutil.which("npm")
if npm:
subprocess.run(
[
npm,
"exec",