{ "skill_name": "libafl", "skill_path": "/workspace/skills/trailofbits-skills/plugins/testing-handbook-skills/skills/libafl", "skill_directory": "/workspace/skills/trailofbits-skills/plugins/testing-handbook-skills/skills/libafl", "is_safe": false, "max_severity": "CRITICAL", "findings_count": 8, "findings": [ { "id": "MANIFEST_MISSING_LICENSE_c5ae9be793", "rule_id": "MANIFEST_MISSING_LICENSE", "category": "policy_violation", "severity": "LOW", "title": "Skill does not specify a license", "description": "Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms.", "file_path": "SKILL.md", "line_number": null, "snippet": null, "remediation": "Add 'license' field to SKILL.md frontmatter (e.g., MIT, Apache-2.0)", "analyzer": "static", "metadata": { "meta_reviewed": true } }, { "id": "YARA_command_injection_6c119059a7", "rule_id": "YARA_command_injection", "category": "command_injection", "severity": "CRITICAL", "title": "INJECTION ATTACK detected by YARA", "description": "Detects command injection patterns in agent skills: shell operators, system commands, and network tools: wget https://apt.llvm.org/llvm.sh", "file_path": "SKILL.md", "line_number": 62, "snippet": "wget https://apt.llvm.org/llvm.sh", "remediation": "Review and remove injection attack pattern", "analyzer": "static", "metadata": { "yara_rule": "command_injection", "yara_namespace": "command_injection", "matched_string": "$data_exfiltration_tools", "threat_type": "INJECTION ATTACK", "meta_reviewed": true } }, { "id": "YARA_command_injection_91e9cb5b76", "rule_id": "YARA_command_injection", "category": "command_injection", "severity": "CRITICAL", "title": "INJECTION ATTACK detected by YARA", "description": "Detects command injection patterns in agent skills: shell operators, system commands, and network tools: curl -O ", "file_path": "SKILL.md", "line_number": 512, "snippet": "curl -O https://raw.githubusercontent.com/glennrp/libpng/f8e5fa92b0e37ab597616f554bee254157998227/contrib/oss-fuzz/libpng_read_fuzzer.cc", "remediation": "Review and remove injection attack pattern", "analyzer": "static", "metadata": { "yara_rule": "command_injection", "yara_namespace": "command_injection", "matched_string": "$data_exfiltration_tools", "threat_type": "INJECTION ATTACK", "meta_reviewed": true } }, { "id": "YARA_command_injection_b18b0f6a35", "rule_id": "YARA_command_injection", "category": "command_injection", "severity": "CRITICAL", "title": "INJECTION ATTACK detected by YARA", "description": "Detects command injection patterns in agent skills: shell operators, system commands, and network tools: curl -o ", "file_path": "SKILL.md", "line_number": 523, "snippet": "curl -o seeds/input.png https://raw.githubusercontent.com/glennrp/libpng/acfd50ae0ba3198ad734e5d4dec2b05341e50924/contrib/pngsuite/iftp1n3p08.png", "remediation": "Review and remove injection attack pattern", "analyzer": "static", "metadata": { "yara_rule": "command_injection", "yara_namespace": "command_injection", "matched_string": "$data_exfiltration_tools", "threat_type": "INJECTION ATTACK", "meta_reviewed": true } }, { "id": "YARA_command_injection_45309bf25a", "rule_id": "YARA_command_injection", "category": "command_injection", "severity": "CRITICAL", "title": "INJECTION ATTACK detected by YARA", "description": "Detects command injection patterns in agent skills: shell operators, system commands, and network tools: curl -O ", "file_path": "SKILL.md", "line_number": 528, "snippet": "curl -O https://raw.githubusercontent.com/glennrp/libpng/2fff013a6935967960a5ae626fc21432807933dd/contrib/oss-fuzz/png.dict", "remediation": "Review and remove injection attack pattern", "analyzer": "static", "metadata": { "yara_rule": "command_injection", "yara_namespace": "command_injection", "matched_string": "$data_exfiltration_tools", "threat_type": "INJECTION ATTACK", "meta_reviewed": true } }, { "id": "llm_finding_libafl_0", "rule_id": "LLM_DATA_EXFILTRATION", "category": "data_exfiltration", "severity": "LOW", "title": "Missing Optional Metadata Fields", "description": "The skill manifest is missing optional metadata fields including 'license', 'compatibility', and 'allowed-tools'. While these fields are optional per the agent skills specification, their absence reduces transparency about the skill's behavior and restrictions.", "file_path": "SKILL.md", "line_number": null, "snippet": "YAML manifest shows: license: Not specified, compatibility: Not specified, allowed-tools: Not specified", "remediation": "Add optional metadata fields to improve transparency: specify license (e.g., MIT, Apache-2.0), compatibility information (e.g., 'Works in Claude.ai, Claude Code, API'), and allowed-tools restrictions if applicable.", "analyzer": "llm", "metadata": { "model": "claude-sonnet-4-5-20250929", "overall_assessment": "This LibAFL fuzzing skill is SAFE for use. The skill provides educational documentation about LibAFL, a modular fuzzing library, with installation instructions and usage guidance. No executable scripts are included, and the instruction content is purely informational. The skill does not attempt prompt injection, data exfiltration, command injection, or any other malicious behavior. The identified issues are minor: missing optional metadata fields, truncated instruction content, and references to non-existent Python files. These are documentation quality issues rather than security threats. The skill appears to be an incomplete or work-in-progress documentation resource rather than a functional executable skill.", "primary_threats": [], "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "scanner_category": "SECURITY VIOLATION", "meta_reviewed": true } }, { "id": "llm_finding_libafl_1", "rule_id": "LLM_SOCIAL_ENGINEERING", "category": "social_engineering", "severity": "LOW", "title": "Incomplete Instruction Content", "description": "The instruction body appears to be truncated mid-sentence ('Use LibAFL as a replacement for libFuzzer with existing h'). This could lead to confusion or incomplete guidance for users attempting to use the skill.", "file_path": null, "line_number": null, "snippet": "Last line of instruction body: 'Use LibAFL as a replacement for libFuzzer with existing h' - appears cut off", "remediation": "Complete the instruction content to ensure users have full guidance on using LibAFL in both drop-in replacement mode and custom fuzzer mode.", "analyzer": "llm", "metadata": { "model": "claude-sonnet-4-5-20250929", "overall_assessment": "This LibAFL fuzzing skill is SAFE for use. The skill provides educational documentation about LibAFL, a modular fuzzing library, with installation instructions and usage guidance. No executable scripts are included, and the instruction content is purely informational. The skill does not attempt prompt injection, data exfiltration, command injection, or any other malicious behavior. The identified issues are minor: missing optional metadata fields, truncated instruction content, and references to non-existent Python files. These are documentation quality issues rather than security threats. The skill appears to be an incomplete or work-in-progress documentation resource rather than a functional executable skill.", "primary_threats": [], "aitech": "AITech-15.1", "aitech_name": "Harmful / Misleading / Inaccurate Content", "aisubtech": "AISubtech-15.1.1", "aisubtech_name": "Deceptive or Misleading Content", "scanner_category": "DECEPTIVE CONTENT", "meta_reviewed": true } }, { "id": "llm_finding_libafl_2", "rule_id": "LLM_DATA_EXFILTRATION", "category": "data_exfiltration", "severity": "LOW", "title": "Referenced Files Not Found", "description": "The skill references two Python files ('the.py' and 'this.py') that are not present in the skill package. These appear to be placeholder or incorrectly referenced files that could cause confusion or errors if the skill attempts to use them.", "file_path": null, "line_number": null, "snippet": "Referenced files: the.py, this.py - both marked as 'not found'", "remediation": "Either include the referenced Python files in the skill package, remove the references if they are not needed, or correct the file references to point to the intended files.", "analyzer": "llm", "metadata": { "model": "claude-sonnet-4-5-20250929", "overall_assessment": "This LibAFL fuzzing skill is SAFE for use. The skill provides educational documentation about LibAFL, a modular fuzzing library, with installation instructions and usage guidance. No executable scripts are included, and the instruction content is purely informational. The skill does not attempt prompt injection, data exfiltration, command injection, or any other malicious behavior. The identified issues are minor: missing optional metadata fields, truncated instruction content, and references to non-existent Python files. These are documentation quality issues rather than security threats. The skill appears to be an incomplete or work-in-progress documentation resource rather than a functional executable skill.", "primary_threats": [], "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "scanner_category": "SECURITY VIOLATION", "meta_reviewed": true } } ], "scan_duration_seconds": 14.863396167755127, "duration_ms": 14863, "analyzers_used": [ "static_analyzer", "llm_analyzer", "meta_analyzer" ], "timestamp": "2026-02-08T08:13:11.015310" }