make-bot-ui

Repo ships no git tags and no GitHub releases — consumers cannot pin to stable, reviewable versions

PRIVILEGE_ESCALATION; EXTERNAL_DOWNLOADS; COMMAND_EXECUTION; INDIRECT_PROMPT_INJECTION; CREDENTIALS_UNSAFE — [PRIVILEGE_ESCALATION]: The skill uses sudo for several high-privilege operations including the execution of a downloaded script (sudo sh) and the configuration of network interfaces via sudo tailscale up. [EXTERNAL_DOWNLOADS]: Fetches the Tailscale installation script from the service's official website using curl -fsSL https://tailscale.com/install.sh. [COMMAND_EXECUTION]: Executes shell commands to install software, manage network nodes, and probe local network ports (tailscale status, tailscale ip -4, curl probes). [CREDENTIALS_UNSAFE]: Instructions direct the agent to store a webhook sen…

W011 Third-party content exposure detected (indirect prompt injection risk).; W013 Attempt to modify system services in skill instructions. — Third-party content exposure detected (medium risk: 0.30). The webhook routine ingests POST bodies from an external source (the user-created bot UI page) which can contain outsider-authored free text. Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill prompt instructs the agent to run installation and setup commands using sudo (curl ... | sudo sh and sudo tailscale up), which compromises the machine's state by asking the agent to obtain sudo privileges.