Back to skill

Security audit

Dify Orchestrator

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed self-hosted Dify operations helper with powerful but purpose-aligned management actions and explicit safety checks.

Install this only for agents you trust to administer your self-hosted Dify workspace. Use narrowly scoped Dify credentials, keep secrets in local configuration rather than prompts or logs, and review destructive actions like app deletion before confirming them.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (8)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

The skill content is written primarily in German for user-facing guidance, while the manifest metadata starts in English. This creates a language-policy concern because the skill appears to assume a specific language for operation without documenting user opt-in or offering a language/locale choice.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The document is written entirely in German, beginning with 'Diese Referenz verdichtet...' and continuing throughout, without offering a language choice or documenting a justified locale restriction. Under the policy rule, forcing a specific language without opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The document content is written in German from the outset, which imposes a specific language on users without any visible opt-in, alternative language option, or stated regional justification. Under the policy, language constraints should either be optional for users or clearly documented as necessary.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The document content is written in German from the outset, which imposes a specific language/locale on users without any opt-in or alternative. The file does not state that it is a region-specific or German-only reference, so this appears to violate the language-choice policy.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The file begins with a German-only description ('Diese Referenz beschreibt...') and the rest of the document is written in German, which imposes a specific language without offering user opt-in or documenting a justified locale constraint. Under the stated policy, language-only content can be a natural-language policy violation when no choice or rationale is provided.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
92% confidence
Finding

The document body is written in German, while the cited sources and surrounding context may reasonably be expected to be multilingual or English-oriented. This creates a language-policy concern because the file imposes a specific language without any opt-in, alternative locale, or stated region-specific justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown file contains operational guidance in German ('Diese Referenz sammelt operative Grundregeln fuer self-hosted Dify.') and continues in that language throughout, but it does not indicate that German is optional or that the skill is region-specific. Under the language/locale policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

This markdown file contains user-facing natural language entirely in German, but it does not state that the content is intentionally German-only or offer any language choice. Under the language/locale policy, forcing a specific language without user opt-in can be a policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.