SkillSpector · fal-ai

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/fal_client.py

Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow.

scripts/fal_client.py

Without declared permissions the skill's intent is opaque and cannot be validated.

SKILL.md

Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft.

scripts/fal_client.py

Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.

scripts/fal_client.py

Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface.

scripts/fal_client.py

Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface.

scripts/fal_client.py