Skip to main content

agent-tool

Defines tools for support agents to enhance capabilities like refund processing and knowledge lookup, improving customer service efficiency.

Install this skill

or
59/100

Security score

The agent-tool skill was audited on Mar 8, 2026 and we found 5 security issues across 2 threat categories, including 2 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 86

Template literal with variable interpolation in command context

SourceSKILL.md
86throw new Error(`App not found: ${appId}`) // ← THROW, don't return error
high line 173

Template literal with variable interpolation in command context

SourceSKILL.md
173return { found: false, error: `App not found: ${appId}` }
high line 211

Template literal with variable interpolation in command context

SourceSKILL.md
211text: { type: 'mrkdwn', text: `*Reason:* ${reason}\n*Urgency:* ${urgency}` },
low line 99

Webhook reference - potential data exfiltration

SourceSKILL.md
99webhookSecret: app.webhook_secret,
medium line 178

Webhook reference - potential data exfiltration

SourceSKILL.md
178webhookSecret: app.webhook_secret,
Scanned on Mar 8, 2026
View Security Dashboard
Installation guide →