70High
The skill exfiltrates sensitive GitHub credentials from local environment files and performs unauthorized outbound network requests while bypassing all tool-based security constraints and access controls.
HygienePackaging & Manifest1 finding
Skill Info
Nameoaustegard/claude-skills/accessing-github-repos
Registrygithub
Versiond8756cf5b683
PURLpkg:github/oaustegard/claude-skills@d8756cf5b683?skill=accessing-github-repos
Stars127
Installs62
Source
SHA-256ac537461e827...
SHA-1f4264a0a2b0c...
MD5279d24ddfaf1...
TLSH6302d7e39801...
ssdeep96:mEgD/uAia...
Size8,870 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
62 installs
Skills.shDocs
npx skills add https://github.com/oaustegard/claude-skillsAssessments (3)
AI Agent Traps ↗Credential harvesting via automated file scanninghighcredential theftAML.T0055AML.T0037LLM02:2025
The skill includes automated logic to scan local project files (/mnt/project/.env, /mnt/project/github.env) for GitHub Personal Access Tokens, which could be exfiltrated or misused by the agent. [ensemble: confirmed by 3/3 passes; severity set to the agreed median (ADR-0067).]
90% confidenceline 90
env_paths = ['/mnt/project/.env', '/mnt/project/github.env']
Outbound network request primitive in skill code — can transmit data externallylowdata exfiltrationAML.T0025AML.T0024LLM02:2025
Outbound network request primitive in skill code — can transmit data externally (seen 2 times in this file at lines 14, 20)
95% confidenceline 14
urllib.request.urlopen(req)
Outbound network request primitive in skill code — can transmit data externallylowdata exfiltrationAML.T0025AML.T0024LLM02:2025
Outbound network request primitive in skill code — can transmit data externally
95% confidenceline 9
urllib.request.urlopen(req)
Outbound network request primitive in skill code — can transmit data externallylowdata exfiltrationAML.T0025AML.T0024LLM02:2025
Outbound network request primitive in skill code — can transmit data externally
95% confidenceline 26
urllib.request.urlopen(req)
Outbound network request primitive in skill code — can transmit data externallylowdata exfiltrationAML.T0025AML.T0024LLM02:2025
Outbound network request primitive in skill code — can transmit data externally
95% confidenceline 8
urllib.request.urlopen(req)
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/oaustegard/claude-skills/accessing-github-repos)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/oaustegard/claude-skills/accessing-github-repos"><img src="https://mondoo.com/ai-agent-security/api/badge/github/oaustegard/claude-skills/accessing-github-repos.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/oaustegard/claude-skills/accessing-github-repos.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow