Security audit

Find API

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed API-reference skill with some broad triggers and unpinned install examples, but no evidence of hidden execution, persistence, or malicious data handling.

Install only if you want a broad API-discovery reference. Treat its package-install commands as optional, use a virtual environment, avoid administrative installs, and do not paste real API keys into chat, logs, notebooks, or committed files.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:62
Finding: Unpinned Third-Party Package Installation Creates Supply-Chain Risk
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Note

Location: SKILL.md:209
Finding: API Credentials Are Embedded in Request URLs
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

High

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The trigger guidance includes very broad terms like "API", "fetch external data", and "reliable data source", which are common across many unrelated tasks. This can cause the skill to activate unexpectedly and steer the agent toward external data acquisition when the user did not ask for it, increasing the chance of unnecessary network use or inappropriate tool selection.
Content: No source excerpt is available for this finding.

Vague Triggers

High

Category: Not specified by scanner
Confidence: 99% confidence
Finding: The manifest metadata contains ambiguous single-word triggers such as "api", "reliable", "fetch", "price", and "news" that are likely to appear in normal conversation. Overbroad manifest triggers are dangerous because they can auto-invoke this skill in unrelated contexts, causing context hijacking and pushing the agent toward external APIs without sufficient user intent.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The skill documentation is written entirely in Chinese, with no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking audience. The policy specifically flags language or locale constraints that are imposed without user opt-in or clear justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 79% confidence
Finding: Several sections prioritize China-specific providers and examples, such as Chinese A-share markets and Chinese-language address/location workflows, without stating that these are optional or region-dependent. This can create a locale bias if the skill is invoked for users who did not request China-specific handling.
Content: No source excerpt is available for this finding.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 213)May include surrounding context.
md
city = "Beijing" # 当前天气 url = f"https://api.openweathermap.org/data/2.5/weather?q={city}&appid={api_key}&units=metric" response = requests.get(url) data = response.json()

Static analysis

No suspicious patterns detected.