Security audit

Bid Document Review (Lite)

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed bid-document review helper that reads user-selected documents and produces an AI-assisted report, with manageable dependency and accuracy cautions.

Install dependencies in a virtual environment, prefer pinned versions if possible, and use the generated report as an aid for human procurement review rather than a final compliance decision, especially for images, seals, certificates, or legacy .doc files where extraction may be incomplete.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:136
Finding: Unpinned Third-Party Python Dependencies
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: This finding indicates the skill claims support for both .docx and .doc plus AI review outputs, while the detected behavior only covers a subset and omits the actual analytical functions. In a procurement-review context, overstated capability is dangerous because it may create false assurance that a bid was fully audited when critical requirements were never evaluated.
Content: No source excerpt is available for this finding.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: This finding indicates the skill claims support for both .docx and .doc plus AI review outputs, while the detected behavior only covers a subset and omits the actual analytical functions. In a procurement-review context, overstated capability is dangerous because it may create false assurance that a bid was fully audited when critical requirements were never evaluated.
Content: No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 70% confidence
Finding: Without declared permissions the skill's intent is opaque and cannot be validated.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.