Security audit

表情包 · Emoji Sticker

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Chinese-platform sticker compliance helper with local image-processing scripts and disclosed, user-confirmed rule updates.

Install only if you are targeting WeChat, Xiaohongshu, Douyin, or similar Chinese-platform sticker workflows. Review any rule-update diff before confirming writes, and prefer a pinned/reviewed install version when possible.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (17)

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 126)May include surrounding context.
md
3. **渲染**:`python3 scripts/animate_sticker.py cat.png --recipe happy --out cat_happy.gif`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 172)May include surrounding context.
md
3. **渲染**:`python3 scripts/animate_sticker.py cat.png --recipe happy --out cat_happy.gif`

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 173)May include surrounding context.
md
3. **渲染**:`python3 scripts/animate_sticker.py cat.png --recipe happy --out cat_happy.gif`

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The trigger phrase 说「更新表情包规则」即触发巡检 is broad enough to be invoked by ordinary conversation or content quoted by a user, potentially causing unintended network fetches and state-changing rule updates. In an agent setting, ambiguous activation of a workflow that performs WebFetch, diffs, and writes updated rules increases the risk of prompt-trigger collisions and unreviewed external content influencing local skill data.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 92% confidence
Finding: The README instructs users to execute npx clawhub@latest install emoji-sticker-cn, which fetches and runs the latest package version at install time rather than a pinned, reviewed release. This creates a supply-chain risk: if the upstream package is compromised or a breaking/malicious release is published, users may execute attacker-controlled code during installation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The description explicitly defines the skill as a Chinese-platform assistant and frames outputs around Chinese-language platform content, which can amount to a locale/language restriction. The file does not offer a user language choice or opt-in for language behavior, so this is a natural-language policy concern under the language/locale rule.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The instruction requires fields such as the sticker name and meaning words to be in Chinese-specific forms (for example, character-count limits in 汉字), which effectively enforces a language choice. Because the file does not clearly state that this is a platform-justified constraint with optional user-facing language selection outside those fields, it may violate the language/locale policy.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The document states '文字信息用中文为主', which imposes a language preference in natural-language guidance rather than offering a user choice. Under the policy, locale or language constraints should be opt-in or clearly justified as region-specific; here the file is a general reference source and does not explicitly present this as a user-selectable option.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The title and purpose statements explicitly frame the skill reference around Chinese-language platform compliance only, e.g. '中文平台违禁词合规参考' and repeated references to Chinese platforms. This constitutes a locale/language constraint in natural-language instructions without any indication of user choice, opt-in, or justification as a region-specific compliance mode within the file itself.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The document states this is for the emoji-sticker-cn route, which indicates a China/Chinese-specific path, but the file does not offer any user language or locale selection. Under the policy for natural-language issues, forcing a specific language or locale without opt-in is reportable unless the constraint is explicitly justified as region-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: Line L42 states that the image should default to not showing Chinese text, and when text is used it is specifically Chinese text. This imposes a language-specific default behavior rather than offering a user choice, which fits the policy category for language or locale constraints without opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This Python file contains user-facing natural-language content entirely in Chinese, including the module description and usage instructions. The stated policy forbids forcing a specific language without user opt-in, and there is no indication that the tool is region-specific or that an alternative language is available.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The CLI description, argument help, errors, warnings, and success output are all emitted in Chinese only. Because the file does not offer language selection or document a necessary locale restriction, this is a natural-language policy violation under the language/locale rule.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This code file contains user-facing natural-language instructions, usage examples, and descriptions exclusively in Chinese. Under the policy for natural-language violations, forcing a specific language without user opt-in can exclude users and should be flagged unless the locale restriction is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This Python file contains user-facing natural language entirely in Chinese, including the main description and usage/help text, and the runtime messages later in the file continue that pattern. Under the language/locale policy, forcing a specific language without opt-in is a policy concern unless the locale restriction is explicitly justified; this file does not offer a language choice or state that it is only for a Chinese-language compliance workflow.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The module docstring and CLI help are entirely written in Chinese and instruct the user to copy Chinese-form content for submission, with no indication that language choice is optional. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The file’s natural-language guidance states that the platform specification source is a Chinese-language document and the entire user-facing interface is fixed in Chinese, indicating a language/locale constraint without offering any user choice or opt-in. Under the policy, forcing a specific language is a natural-language policy violation unless the locale constraint is explicitly justified as region-specific or optional.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.