Security audit

ppt-design-digital

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only PPT drafting skill for Chinese government digitalization presentations, with no executable code, persistence, credential use, or hidden data access found.

Install this if you want Chinese, formal government-sector PPT drafting help. Provide only the project, policy, company, or planning materials needed for the slides, and explicitly ask for another language or tone if the default government Chinese style is not desired.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (8)

Natural-Language Policy Violations

Medium

Confidence: 86% confidence
Finding: The README states the skill will use '政务场景标准用语', which imposes a specific linguistic style by default. Under the policy, forcing a particular language or locale without offering user choice can be a natural-language policy violation.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The manifest description and the entire skill instruction set are written as a Chinese-only workflow for PPT drafting, with no indication that users may choose another language. Under the policy rule for language/locale constraints, forcing a specific language without opt-in is a natural-language policy violation.

Natural-Language Policy Violations

Medium

Confidence: 96% confidence
Finding: This JSON test case includes multiple natural-language requirements such as '用政务语言表达' and '每页文案必须可直接复制到 PPT', all written as mandatory constraints in Chinese. Because the file provides no language-choice option or documented justification for forcing a specific language/locale, it conflicts with the policy against unqualified language constraints.

Natural-Language Policy Violations

Medium

Confidence: 91% confidence
Finding: The rule '语言风格必须正式、客观、严谨' appears in a Chinese-language scenario and reinforces a fixed language/locale expectation without giving the user a choice. While tone constraints are acceptable, here they are embedded in a test case that otherwise assumes Chinese-language delivery and does not document that constraint as region-specific output policy.

Natural-Language Policy Violations

Medium

Confidence: 89% confidence
Finding: These validation rules are expressed as mandatory deliverable requirements for a Chinese presentation workflow, but the file does not expose any user-selectable language setting. Under the language/locale policy, skills should not force a specific language unless the user opts in or the region-specific constraint is clearly documented.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: This markdown file presents all instructions and guidance solely in Chinese, which effectively forces a specific language on users. Under the policy, language constraints should either be optional for the user or clearly justified as region-specific.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The file title and instructions are entirely in Chinese and describe the output template as the required format for PPT content. There is no indication that users may choose another language or that the template is restricted to a justified Chinese-only context, which creates a language/locale policy concern.

Natural-Language Policy Violations

Medium

Confidence: 89% confidence
Finding: This manifest file contains user-facing natural-language descriptions exclusively in Chinese, including the top-level description and parameter descriptions. Because the skill does not offer language/locale selection or explain that it is intentionally restricted to a Chinese-speaking or region-specific audience, it may violate organizational language/locale policy requirements.

Static analysis

No suspicious patterns detected.