record-tutorial

The skill content contains multiple critical security findings, specifically remote code download and execution, and the use of unpinned dependencies, which contradicts the claimed purpose of a simple recording tool.

Static analysis flagged [critical] MONDOO_AGENT_SKILL_CE_003 (Remote code download and execution) and multiple [medium] MONDOO_AGENT_SKILL_SC_005 (Unpinned npx package execution).

Remote code download and execution detected

python3 -c "from urllib

The skill explicitly instructs the agent to override standard process management by using custom `pkill` patterns and scoped profile paths, which risks interfering with the host's browser management and potentially hiding malicious processes. [ensemble: confirmed by 3/3 passes; severity set to the agreed median (ADR-0067).]

pkill -f "$SESSION_PROFILE" 2>/dev/null || true

child_process module imported — any exec/execSync/spawn call executes OS commands

import { exec } from 'node:child_process';

NER model detected organization in skill content (confidence: 0.51)

V***

NER model detected organization in skill content (confidence: 0.71)

V****

NER model detected organization in skill content (confidence: 0.83)

D********

NER model detected organization in skill content (confidence: 0.84)

V*************

NER model detected organization in skill content (confidence: 0.70)

*

NER model detected organization in skill content (confidence: 0.96)

*

Unpinned npx package execution — `npx <pkg>` without a version pin pulls latest from npm at runtime (seen 3 times in this file at lines 165, 3677, 4089)

npx cache

Global/unverified dependency execution — global npm/yarn package, dotnet tool, or auto-confirmed npx run without version or integrity pinning (seen 4 times in this file at lines 190, 194, 668, 3674)

npm install -g

SKILL.md links to "cli-commands.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[./cli-commands.md](./cli-commands.md)

SKILL.md links to "context-writing.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[./context-writing.md](./context-writing.md)

SKILL.md links to "live-site-discovery.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[./live-site-discovery.md](./live-site-discovery.md)

SKILL.md links to "narration-rules.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[./narration-rules.md](./narration-rules.md)

SKILL.md links to "pacing.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[./pacing.md](./pacing.md)