Security audit
Security checks for vulnerabilities and agentic risk
The skill creates packing checklists from sanitized orders, and its bundled implementation matches that purpose without accessing business systems.
Provide only sanitized orders and manually verify the checklist before packing. The documented installer is unpinned; prefer reviewed installer and skill revisions.
The only supplied command performs skill installation, which is materially different from organizing order data into warehouse checklists. The installed skill might implement the described workflow, but its contents are not supplied and cannot be verified from this command.
The documented command invokes the npm package skills without pinning its version, so execution can resolve to a changing release rather than a reviewed artifact. If a resolved release is compromised, running the command could execute attacker-controlled code with the user's permissions; the checklist-only business purpose does not constrain this installer. The finding incorrectly labels this an MCP server reference, but the underlying unpinned executable dependency concern is valid.
The installation command invokes the unpinned skills npm package through npx, which can download and execute a changing release with the installing user's permissions. A compromised future release could therefore execute malicious code; this is a supply-chain exposure, not an MCP-server reference as the static finding claims. The README shows no malicious intent, and its offline, manual-review purpose does not require this mutable installation dependency.
Without declared permissions the skill's intent is opaque and cannot be validated.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
permit persons to whom the Software is furnished to do so.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
No suspicious patterns detected.