SkillSpector · walkthrough-gif

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

SKILL.md

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

SKILL.md

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

SKILL.md

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

references/output-pipeline.md

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

references/stagehand-patterns.md

npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

references/stagehand-patterns.md

Code or instructions that leak agent conversation context to external services, potentially exposing sensitive user interactions.

SKILL.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

SKILL.md

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

references/stagehand-patterns.md

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

references/output-pipeline.md

YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).

references/stagehand-patterns.md