China Tools Sourcing

• Outcome: Pass
• Latest audit: Sep 12, 2026 · 2:08 AM UTC
• Version: 1.0.0

Overview

This skill is a narrow China tools sourcing reference that reads its bundled dataset and exposes lookup helpers without network access, persistence, credentials, or destructive behavior.

Before installing, treat the sourcing data as static reference material and verify business-critical supplier, certification, and market claims independently. The main improvement would be clearer manifest permissions documenting that the skill only needs to read its bundled data.json file.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 85% confidence
• Finding: The skill is marked invocable and references implementation in `do.py`, while the manifest does not declare any tool scope or permissions despite static analysis detecting file-read capability. Missing explicit scope weakens least-privilege controls and can cause reviewers or runtime policy layers to misunderstand what the skill can access.

Natural-Language Policy Violations

Low

• Confidence: 77% confidence
• Finding: The natural-language description presents the skill as exclusively focused on China's manufacturing landscape and does not indicate that this locale restriction is optional or user-selectable. Under the policy rule for language/locale constraints, a fixed regional scope should either offer user choice or clearly document why the locale limitation is required.

Natural-Language Policy Violations

Low

• Confidence: 76% confidence
• Finding: This JSON file includes locale-specific natural-language content and Chinese script in the source field, but provides no indication that the language/locale is intentional, user-selected, or constrained to a region-specific use case. Under the policy rule for language or locale violations, forcing or assuming a locale without opt-in can be problematic when not clearly documented.

Static analysis

No suspicious patterns detected.