T08 · Insecure Dependencies
Warning
- Location
SKILL.md:5- Finding
Unpinned Dependency Installed from a Third-Party Homebrew Tap
- Content
View full analysis
- Remediation
View remediation
Security audit
skill-0327-01
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward wrapper guide for a summarization CLI, with privacy and supply-chain cautions users should understand before use.
Before installing, review the summarize CLI and Homebrew tap source, and avoid using it on sensitive files or private URLs unless you are comfortable with the selected model provider and optional Firecrawl or Apify services receiving the submitted content. Provide only the API keys needed for the provider or fallback you intend to use.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The skill explicitly encourages summarizing URLs, local files, PDFs, images, audio, and YouTube content via external model providers, but it does not warn users that the referenced content and extracted data may be transmitted to third-party APIs. This can cause unintentional disclosure of sensitive local documents or private URLs, especially because the examples and default model make remote processing the normal path.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The skill documents optional fallback services such as Firecrawl and Apify, but it does not warn that enabling these features may send user-supplied URLs, page contents, or media metadata/content to additional third parties beyond the selected model provider. This increases privacy and compliance risk because users may believe only the primary summarization provider receives their data.
- Content
Static analysis
No suspicious patterns detected.