Security audit

室内设计自动预算生成器

Security checks for vulnerabilities and agentic risk

Overview

This skill locally converts a DXF floor plan and a local pricing library into an Excel budget, with no evidence of hidden network access, persistence, or deceptive behavior.

Before installing, confirm you are comfortable running a local Python script that reads your DXF file and a local pricing library, then writes an Excel workbook to the path you provide. Use a non-critical output filename because the script may overwrite an existing workbook, and expect to adjust the hardcoded pricing-library path for your own machine.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The trigger phrases are generic budgeting terms that can easily match ordinary user requests unrelated to this specific DXF-to-Excel workflow. That increases the chance the skill is invoked in the wrong context, causing unintended file-processing or budget-generation actions based on ambiguous prompts.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: The module docstring presents the skill name and usage entirely in Chinese, which imposes a specific language on users without any opt-in or alternative locale. Under the policy, forcing a language or locale without user choice is a natural-language policy violation.

Natural-Language Policy Violations

Medium

Confidence: 91% confidence
Finding: The skill name and description are entirely in Chinese, which implies a fixed language/locale presentation without indicating user choice, opt-in, or region-specific scope. Under the policy, language constraints should either offer a choice or be clearly justified as region-specific.

Missing User Warnings

Low

Confidence: 84% confidence
Finding: The usage description shows that the tool writes an Excel file to a user-specified path, but it does not clearly warn users that running the command will create or overwrite a local file. This can lead to accidental data loss or unexpected filesystem side effects, especially if the output path already contains an important workbook.

Vague Triggers

Low

Confidence: 87% confidence
Finding: This manifest description explains what the skill does but provides no explicit trigger phrases, activation boundaries, or exclusion conditions. In a manifest file, that can make invocation semantics overly broad because nothing narrows when the skill should or should not be selected.

Static analysis

No suspicious patterns detected.