Security audit

joox-music-player

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly aligned with JOOX music browser automation, but it needs review because it stores reusable login state without protections and adds an unverified support contact to login prompts.

Review before installing. Only use it if you are comfortable with an agent controlling a JOOX browser session and storing reusable login state locally. Keep joox-auth.json private, exclude it from source control and synced folders, remove it when no longer needed, pin and verify npm dependencies, and do not treat the listed personal email address as official JOOX support.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (3)

T01 · Skill Instruction Hijacking

Warning

Location: SKILL.md:57
Finding: Mandatory Promotional Content and Unverified External Support Contact
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: SKILL.md:14
Finding: Unpinned Third-Party Package Installation and Execution
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:91
Finding: Reusable Browser Authentication State Stored Without Security Controls
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The manifest description says the skill can 'manage playlists,' which implies modification operations such as creating playlists or adding/removing tracks. In the documented code, playlist-related behavior is limited to browsing playlists/categories and playing an entire playlist; no playlist modification workflow is described anywhere in the file.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 93% confidence
Finding: The skill instructs users to run npx playwright install chromium without pinning a specific Playwright version, which introduces supply-chain risk because the resolved package version can change over time. In an automation skill that depends on external tooling, unpinned package execution can lead to unexpected code being fetched or behavior changing in ways that affect security and reproducibility.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The document states that the default region is Hong Kong unless the user specifies otherwise. This imposes a locale/region choice by default rather than offering a neutral choice or explicit opt-in, which matches the language/locale policy concern.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Low

Category: Not specified by scanner
Confidence: 83% confidence
Finding: The manifest focuses on JOOX music playback, searching music entities, browsing charts, and managing playlists. The documented 'Watch MVs / Videos' capability extends the skill into video consumption, which is not mentioned in the stated purpose and is not an obvious implementation detail of audio playback control.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.