SkillSpector · latex-paper-en

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/check_format.py

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/compile.py

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/compile.py

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/compile.py

The skill uses 'file_write' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.

scripts/deai_batch.py

The skill uses 'network' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.

scripts/online_bib_verify.py

The skill uses 'shell' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.

scripts/check_format.py

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

references/CITATION_VERIFICATION.md

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

scripts/online_bib_verify.py

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

scripts/online_bib_verify.py

Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.

scripts/analyze_experiment.py

Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.

scripts/check_format.py

Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.

scripts/compile.py

Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.

scripts/compile.py

Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.

scripts/compile.py

Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.

scripts/deai_check.py