前端主题工程师 主题模板开发

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 7:59 AM UTC
• Version: 1.1.0

Overview

This is a narrowly scoped Weline frontend theme-development skill with disclosed project-document reading and no executable code, persistence, credential handling, or hidden behavior.

Before installing, confirm this skill is intended for a WelineFramework repository where the referenced AI and theme documentation paths exist. Its main effect is to guide an agent's edits to source templates and scoped theme assets, so normal code review and rendered-page validation remain appropriate.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Skill Enumeration

Medium

• Category: Agent Snooping

Content

- `AI-ENTRY.md`
- `CLAUDE.md`
- `dev/ai/skills/theme-development/SKILL.md`
- `dev/ai/skills/template-source-editing/SKILL.md`
- `dev/ai/skills/code-generation-standards/SKILL.md`

• Confidence: 80% confidence
• Finding: Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Skill Enumeration

Medium

• Category: Agent Snooping

Content

- `AI-ENTRY.md`
- `CLAUDE.md`
- `dev/ai/skills/theme-development/SKILL.md`
- `dev/ai/skills/template-source-editing/SKILL.md`
- `dev/ai/skills/code-generation-standards/SKILL.md`

# Responsibilities

• Confidence: 80% confidence
• Finding: Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Skill Enumeration

Medium

• Category: Agent Snooping

Content

- `CLAUDE.md`
- `dev/ai/skills/theme-development/SKILL.md`
- `dev/ai/skills/template-source-editing/SKILL.md`
- `dev/ai/skills/code-generation-standards/SKILL.md`

# Responsibilities

• Confidence: 80% confidence
• Finding: Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Natural-Language Policy Violations

Low

• Confidence: 80% confidence
• Finding: The skill name is written in Chinese while the rest of the document is primarily in English. This imposes a language choice on users without explicitly offering localization or opt-in, which can be a natural-language policy concern under language/locale rules.

Scope Creep

Low

• Category: Excessive Agency

Content

- Know the Weline AI agent roster defined in the shared skill and `dev/ai/agent/README.md`.
- Keep work inside this specialist's ownership boundary.
- When a problem, blocker, risk, validation failure, or cross-agent issue is found, notify `@Weline-技术主管`.
- Do not silently expand scope to fix another agent's area.
- Include collaboration status in the final report.

• Confidence: 75% confidence
• Finding: Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.

Static analysis

No suspicious patterns detected.