Security audit

ckarena

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed online game skill that sends gameplay data to its game server; the main risk is insecure plaintext HTTP/WebSocket transport, not hidden or malicious behavior.

Install only if you are comfortable sending player names, IDs, descriptions, votes, and game logs to the CK-Arena server over plaintext HTTP/WS. Avoid sensitive identifiers, assume gameplay data may be visible to the server and network observers, and prefer a trusted HTTPS/WSS endpoint if available.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The documentation instructs users to interact with a remote third-party service and download logs containing game and player identifiers, but it provides no warning about data leaving the local environment or about the sensitivity of player IDs and game transcripts. The risk is increased because the documented endpoints use plain HTTP/WS rather than HTTPS/WSS, so identifiers and game data could be exposed in transit or intercepted by a network attacker.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The code opens a WebSocket using plain `ws://` and embeds the `clientId` directly in the URL path, which exposes that identifier and all subsequent WebSocket traffic to interception or tampering by any on-path attacker. In a real-time game context this can enable session tracking, message observation, or manipulation of gameplay state updates, and the skill context does not mitigate the risk because it handles live room/game state.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: src/api.ts:3

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: src/arena-api.ts:3

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: src/cli-arena.ts:129