The skill contains critical vulnerabilities including SQL injection, command execution, and SSRF, which enable unauthorized data exfiltration and internal network access, contradicting its stated purpose of secure code analysis.
npx skills add https://github.com/getsentry/warden-skillsUser input is used to construct a URL for a server-side HTTP request. This could allow an attacker to make requests to internal services or cloud metadata endpoints (Server-Side Request Forgery). Validate URLs against an allowlist of permitted hosts and schemes.
taint source (line 1): req.nextUrl → sink: fetch(new URL(req.nextUrl.searchParams.get("url")!))User input is used to construct a URL for a server-side HTTP request. This could allow an attacker to make requests to internal services or cloud metadata endpoints (Server-Side Request Forgery). Validate URLs against an allowlist of permitted hosts and schemes.
taint source (line 1): req.nextUrl → sink: fetch(url, { redirect: "manual" })Outbound network request primitive in skill code — can transmit data externally
requests.get(request.GET["url"], allow_redirects=True)
Direct shell/command execution sink in skill code
subprocess.run(f"git clone {repo_url}", shell=True, check=True)Outbound network request primitive in skill code — can transmit data externally
fetch(new URL(req.nextUrl.searchParams.get("url")!))Outbound network request primitive in skill code — can transmit data externally
fetch(url, { redirect: "manual" })User input flows into a SQL query without proper sanitization. This could lead to SQL injection. Use parameterized queries with placeholders (?) or %s and pass parameters as a separate tuple/list argument.
taint source (line 1): request.GET['email'] → sink: f"SELECT * FROM users WHERE email = '{request.GET['email']}'"The skill's own code contains multiple critical and low-severity security vulnerabilities, including SSRF, SQL injection, and dangerous command execution primitives, which contradict its stated purpose of performing secure code analysis.
Static analysis summary flags: [critical] js-ssrf-request, [critical] python-sql-injection, and [low] AISEC_BEHAVIOR_PY_DANGEROUS_EXEC.
Skill does not specify a license field. Specifying a license helps users understand usage terms.
[](https://mondoo.com/ai-agent-security/skills/github/getsentry/warden-skills/vercel-deepsec)<a href="https://mondoo.com/ai-agent-security/skills/github/getsentry/warden-skills/vercel-deepsec"><img src="https://mondoo.com/ai-agent-security/api/badge/github/getsentry/warden-skills/vercel-deepsec.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/getsentry/warden-skills/vercel-deepsec.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.