Security audit

产品工坊（Product Workshop）

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese product-management template skill with broad activation wording but no hidden execution, data access, persistence, or destructive behavior.

Install if you want Chinese-language product-management workflows and templates. Be aware it may activate for many product-adjacent requests, so users who prefer narrower triggering or another language may want the publisher to clarify scope or add localization options.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The skill description is scoped to a very broad set of common product-management activities, so it may activate in many ordinary conversations where the user did not clearly request this specialized workflow. Over-broad triggering can cause unintended instruction injection into unrelated tasks, override the base assistant behavior, and increase the chance that downstream referenced materials are loaded unnecessarily.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The instruction '当用户提出产品相关的任务时' is an ambiguous activation condition that lacks concrete boundaries, making accidental invocation likely. In practice, this can steer general conversations into the skill's prescriptive process and templates even when the user only mentioned product-adjacent topics, reducing user control and expanding the attack surface for prompt-routing mistakes.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 84% confidence
Finding: 标题与全文内容均以中文固定呈现，未说明这是仅面向中文团队的区域性模板，也没有提供语言选择或用户 opt-in。根据规则，强制特定语言而无选择或明确合理范围，属于自然语言层面的语言/locale 政策风险。
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This markdown file consists wholly of Chinese-language instructions and examples, with no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 96% confidence
Finding: This markdown file is natural-language content, so policy checks for language/locale apply. The checklist consistently forces Chinese-only content and provides no indication that the skill is region-specific or that users may opt into another language, which can violate language-choice policy.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The file title and all instructional content are written exclusively in Chinese, with no indication that users may choose another language or that the template is intended only for a Chinese-speaking or region-specific context. Under the stated policy, fixed language constraints without opt-in or justification are natural-language policy violations.
Content: No source excerpt is available for this finding.