SkillSpector · ce-pov

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/peer-job-runner.py

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/peer-job-runner.py

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/peer-job-runner.py

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/peer-job-runner.py

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

scripts/peer-job-runner.py

Without declared permissions the skill's intent is opaque and cannot be validated.

SKILL.md

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

SKILL.md

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

SKILL.md

Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

SKILL.md

Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.

scripts/peer-job-runner.py

Output size or generation rate is not bounded. Unbounded output enables denial-of-service through resource exhaustion, log flooding, or context-window stuffing.

scripts/cross-model-pov.sh

Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution.

scripts/peer-job-runner.py

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

SKILL.md

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

scripts/cross-model-pov.sh

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

scripts/cross-model-pov.sh

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

scripts/cross-model-pov.sh

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

scripts/cross-model-pov.sh

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

scripts/peer-job-runner.py

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

scripts/peer-job-runner.py

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

scripts/peer-job-runner.py