Security audit

skill-0415-05-zip自测过来

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward wrapper for a summarization CLI, but users should understand that installed tools and submitted content may involve third-party services.

Before installing, confirm you trust the Homebrew tap and the summarize CLI publisher. Avoid summarizing sensitive, private, regulated, or confidential files unless you are comfortable with the selected model provider and optional fallback services receiving that content; disable fallbacks such as Firecrawl when they are not needed.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:5
Finding: Unpinned Dependency from a Third-Party Homebrew Tap
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The skill explicitly accepts URLs, local files, and YouTube links and requires third-party model API keys, but it does not warn users that submitted content may be transmitted to external providers or fallback services. This can cause inadvertent disclosure of sensitive local documents, private URLs, or media content to OpenAI, Anthropic, Google, xAI, Firecrawl, or Apify without informed user consent.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.