SkillSpector · ivx-ams-content-ops

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/content-quality-gate.py

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/editorial-brain.py

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/editorial-brain.py

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/editorial-brain.py

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

scripts/content-quality-gate.py

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

scripts/content-quality-gate.py

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

scripts/content-quality-scorer.py

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

scripts/content-quality-scorer.py

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

scripts/content-quality-scorer.py

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

scripts/content-quality-scorer.py

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

scripts/content-transform.py

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

scripts/content-transform.py

Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.

scripts/editorial-brain.py

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

scripts/editorial-brain.py

Without declared permissions the skill's intent is opaque and cannot be validated.

SKILL.md

Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.

scripts/content-transform.py

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

scripts/editorial-brain.py

Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.

scripts/editorial-brain.py

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

scripts/content-transform.py

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

scripts/content-transform.py