---
name: Skill CVE Report
about: Report a known vulnerability in an agent tool/skill
title: "[Skill CVE] "
labels: skill-cve, security
assignees: ''
---

## Tool / Skill Information

- **Tool name:** (e.g., `langchain.tools.shell.ShellTool`)
- **Framework:** (e.g., LangChain, CrewAI, MCP)
- **Affected versions:** (e.g., all, >=0.2.0)

## Vulnerability Details

- **Type:** (e.g., remote_code_execution, data_exfiltration, ssrf, sql_injection)
- **Severity:** (critical / high / medium / low)

## Description

A clear description of the vulnerability and how it can be exploited in an agent context.

## Proof of Concept

```
Describe or show how an attacker could exploit this through prompt injection or tool manipulation.
```

## Impact

What can an attacker achieve by exploiting this vulnerability?

## Remediation

How should developers mitigate this risk?

## References

- Links to related research, documentation, or prior art
