Security audit

美妆到手价审计 · Beauty Offer Auditor

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed shopping-comparison aid for beauty offers and does not ask for account access, private data, automatic purchasing, code execution, or persistence.

Install only if you want structured help comparing beauty or cosmetic offers. Provide offer links, screenshots, prices, and conditions, but avoid sharing account pages, addresses, phone numbers, payment details, or private order data. Treat results as decision support, not a guarantee of the lowest price or current availability, and confirm checkout details manually before buying.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: L03 的自然语言内容表明该技能说明以中文呈现，但文档中未向用户提供语言/locale 选择，也未说明这是特定地区或合规场景下的必要限制。根据规则，未经用户选择而默认强制特定语言，属于自然语言层面的语言/locale policy 风险。
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The trigger section uses broad, natural shopping phrases like '哪个划算' and '买哪个' that can match ordinary conversation outside the skill’s narrowly intended audit workflow. This can cause over-triggering, where the skill activates on general beauty shopping or casual comparison requests and may produce structured audit output without sufficiently explicit user intent or the required input quality.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.