40Medium
The skill executes unauthorized network requests and arbitrary commands to exfiltrate data while bypassing security constraints by failing to declare its required tools and capabilities.
HygienePackaging & Manifest1 finding
Skill Info
Namewarpdotdev/common-skills/scan-new-specs
Registrygithub
Version037b823f6176
PURLpkg:github/warpdotdev/common-skills@037b823f6176?skill=scan-new-specs
Stars113
Installs106
Source
Install
This skill has findings worth reviewing before installing.
GitHub
106 installs
Skills.shDocs
npx skills add https://github.com/warpdotdev/common-skillsAssessments (3)
AI Agent Traps ↗Pipe to curl/wget for data exfiltration detectedmediumdata exfiltrationAML.T0025AML.T0024LLM02:2025
Pipe to curl/wget for data exfiltration detected
95% confidenceline 178
| curl
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/warpdotdev/common-skills/scan-new-specs)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/warpdotdev/common-skills/scan-new-specs"><img src="https://mondoo.com/ai-agent-security/api/badge/github/warpdotdev/common-skills/scan-new-specs.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/warpdotdev/common-skills/scan-new-specs.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow