Back to skill

Security audit

流梦 AI 小说创作助手 FlowDream AI Novel Writer

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent fiction-writing assistant skill with no executable code, remote payloads, or hidden data handling; its main caveats are broad activation wording and Chinese-first guidance.

Install this if you want a Chinese-first workflow for novel or serialized-fiction drafting. Be aware it may create or update local story files such as story-bible.md, and its broad triggers may make it activate for some writing or polishing requests unless your tool lets you scope skill use.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)

Ae1

High
Category
analysis-evasion
Confidence
100% confidence
Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 103)May include surrounding context.

md
- **Cursor**:Cursor 用的是 `.cursor/rules/*.mdc` 而不是 `SKILL.md`。把本文件正文(frontmatter 之后的部分)复制进 `.cursor/rules/novel-writing.mdc`,文件头换成:

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The trigger definition is overly broad because it includes many generic writing-related requests plus the open-ended phrase 'or similar phrases,' which can cause the skill to activate in ambiguous contexts. Over-broad activation can route unrelated prompts into this skill, override more appropriate skills or baseline handling, and increase the chance of prompt-scope confusion or unintended instruction application.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The usage section expands activation through broad keyword matching across Chinese and English without defining exclusions, making accidental invocation more likely. In a skill-routing system, this can misclassify ordinary writing or review requests as fiction-workflow tasks, causing inappropriate file creation, context loading, or structured guidance to be applied where it does not belong.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
78% confidence
Finding

This markdown file is written entirely in Chinese and presents the checklist as the skill content without indicating that users may choose another language. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The checklist is written as the default operating procedure in Chinese and references a Chinese-only output format, which can steer the agent to respond in Chinese without checking the user's language preference. This creates a user-choice and policy-compliance issue: the skill may override the user's requested language or reduce accessibility for non-Chinese users.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

This reference file is written entirely in Chinese and instructs the reviewer in Chinese without offering a language-selection mechanism or documenting that the skill is intentionally limited to Chinese-speaking users. In a broadly triggered writing skill, this can cause the agent to respond in an unexpected language, reducing usability, accessibility, and potentially causing the user to miss important review guidance.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.