t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
MEDIUMURL using raw IP addressextension/worker.js:3 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07 MEDIUMPython subprocess execution detectedreddit.py:67 · Python subprocess execution detectedFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05 MEDIUMURL using raw IP addressextension/manifest.json:18 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07 HIGHOutbound HTTP to raw IP addressextension/worker.js:3 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07 MEDIUMURL using raw IP addressreddit.py:31 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07 HIGHOutbound HTTP to raw IP addressreddit.py:31 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07 HIGHOutbound HTTP to raw IP addressextension/manifest.json:18 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07 LOWAuthorization escalation languageREADME.md:26 · Authorization escalation language · informational: not an instruction fileFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 MEDIUMURL using raw IP addresstests/test_relay.py:197 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07 LOWPrompt injectionREADME.md:26 · Prompt injection — known jailbreak technique reference · informational: not an instruction fileFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01 MEDIUMOutbound HTTP to raw IP addresstests/test_relay.py:197 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07 Instructions loaded
≈523 tok
2 files · 12 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.