T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:41- Finding
Unpinned Remote Repository Retrieval, Dependency Installation, and Code Execution
- Content
View full analysis
- Remediation
View remediation
Security audit
Ai Intelligent Audit Logging
Security checks for vulnerabilities and agentic risk
Overview
The skill describes a plausible audit-logging product, but its install steps run unreviewed remote code and its audit data scope is under-specified.
Review this before installing. Do not run the documented git clone, pip install, and python app.py flow unless you separately trust and inspect the referenced repository and dependencies, preferably at a pinned commit in an isolated environment. Treat the audit functions as potentially sensitive because the artifact does not explain what data is collected or retained.
Vulnerability Patterns
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill description is overly broad and does not define when the audit logging capability should be invoked, what systems it can observe, or what boundaries apply. For a logging and compliance skill, ambiguous scope can lead to over-collection of operational or user data, unexpected monitoring, and misuse in contexts where users did not intend auditing to occur.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
This skill advertises audit logging, operational recording, compliance checks, and behavior analysis, but does not warn users that it may capture activity affecting personal, operational, or sensitive data. In this context, missing privacy and recording disclosures are dangerous because users may enable or deploy the skill without understanding retention, monitoring, or compliance implications, creating privacy, legal, and insider-risk exposure.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The manifest description is overly generic and does not clearly define the skill’s purpose, scope, or appropriate invocation conditions. This can cause the agent to invoke the skill in unintended contexts, increasing the chance of incorrect behavior, misuse, or poor audit/compliance outcomes, especially for a security-relevant logging skill.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The file's description and operational documentation are entirely in Chinese, and there is no indication that users can opt into another language or that the skill is intentionally restricted to a Chinese-speaking or region-specific audience. This may violate language or locale policy where skills should not force a specific language without user opt-in or documented justification.
- Content
Static analysis
No suspicious patterns detected.