Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
该 markdown 文件适用 SQP-1。‘当用户需要：制定私域运营方案/设计社群运营 SOP/规划用户转化路径’ 只是宽泛列出需求场景，没有给出明确触发短语、边界条件或不应触发的反例，容易覆盖普通业务讨论并导致误调用。
- Content
Security audit
私域流量运营SOP生成器
Security checks for vulnerabilities and agentic risk
Overview
This skill generates Chinese marketing SOP templates and does not appear to access files, credentials, or the network.
Install only if you want Chinese-language private-traffic marketing SOP templates. Review the pricing terms because the metadata differs between monthly and one-time descriptions, and treat the generated KPI targets and scripts as generic guidance that must be checked against your business rules, platform rules, and privacy obligations.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
This code file contains natural-language descriptions and generated user-facing scripts exclusively in Chinese, and nowhere indicates that the user can choose another language or that Chinese-only output is an intentional, documented locale constraint. That can violate language/locale policy where skills should not force a specific language without user opt-in.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 86% confidence
- Finding
This README presents all user-facing instructions and descriptions in a single language, which can amount to a language/locale policy issue when no user opt-in or alternative language option is offered. The file does not state that the skill is intentionally region-specific or limited to Chinese-speaking users.
- Content