Security audit

AI视频完整制作工作流

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language AI video production workflow guide with disclosed, purpose-aligned project setup steps and no executable code, network retrieval, credential handling, or persistence.

Install this if you want a Chinese AI-video production workflow. Before letting an agent follow it end to end, confirm where project files should be created and whether uploaded/generated visual assets may be sent to external video or image tools.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The trigger phrases are broad and match common user requests like '帮我制作一个AI视频' or '怎么做AI视频', which can cause the skill to activate in situations where the user may only want narrow advice rather than the full workflow. This creates ambiguous invocation scope and increases the chance of unintended behavior, over-collection of context, or forcing a complex process when a simpler response was appropriate.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file presents all instructions and templates exclusively in Chinese, which can amount to a language/locale policy issue when no user opt-in or alternative language option is provided. The content does not indicate that the skill is intentionally region-specific or that users may choose another language.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill instructs creation of a project folder under '~/Desktop/AI视频项目/[剧本名]/' and generation of a progress checklist without warning that this modifies the user's filesystem. In an agent setting, undisclosed file creation can lead to surprising side effects, workspace pollution, and writes to locations the user did not explicitly approve.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 85% confidence
Finding: 该 markdown 文件适用 SQP-1。L576-L578 使用“自动触发检查”“全部通过？”描述流程，但没有说明在什么上下文、由谁、基于哪些明确条件触发检查，容易导致技能在输出任意“方案”时都被理解为应自动执行检查。
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown file presents all instructions and templates exclusively in Chinese, with no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file contains only Chinese-language instructions and does not mention any user opt-in, alternative language support, or justification for restricting content to Chinese. Under the policy, forcing a specific language without user choice can constitute a natural-language policy violation.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.