Security audit

China Shoes Sourcing

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple China footwear sourcing reference that reads bundled data and does not show hidden access, persistence, network use, or destructive behavior.

Before installing, treat the business data as reference material rather than verified live market intelligence. The skill appears low-risk from a security perspective, but users should independently verify sourcing claims, supplier details, and current regulations before making purchasing decisions.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 70% confidence
Finding: Without declared permissions the skill's intent is opaque and cannot be validated.

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The markdown says "You can interact with this skill using natural language" without defining clear trigger scope, constraints, or exclusion conditions. That can imply the skill may respond to a wide range of everyday phrasing rather than a narrowly bounded set of sourcing-related requests.

Natural-Language Policy Violations

Low

Confidence: 78% confidence
Finding: The natural-language description presents the skill as exclusively about China's footwear manufacturing landscape and does not mention that this regional scope is optional or user-selected. Under the stated policy, locale or region constraints should either offer opt-in choice or be clearly documented as justified.

Natural-Language Policy Violations

Low

Confidence: 78% confidence
Finding: The module docstring presents the skill as specifically for 'China footwear industry intelligence' and sourcing guidance, which imposes a fixed geographic/locale scope in natural language. Under the policy rule, locale constraints should either be explicitly justified as region-specific or offer user choice; this wording does not do either.

Static analysis

No suspicious patterns detected.