Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - Runs **locally** by default. The core `md2share.py` only reads the input `.md` and writes a local `.html` file.
Security audit
Markdown 转手机网页 · MD Out of Chat
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local Markdown-to-HTML converter with clear user-directed file scope and no evidence of hidden upload, persistence, or unsafe automatic execution.
Install only if you want a local Markdown-to-HTML converter. Use it on Markdown files or folders you explicitly choose, review generated HTML before sharing, and only use the optional public-link workflow after a separate confirmation with a deploy tool you trust.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (7)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - Runs **locally** by default. The core `md2share.py` only reads the input `.md` and writes a local `.html` file.
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md - `SKILL.md` — This file
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
Without declared permissions the skill's intent is opaque and cannot be validated.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The generated page hard-codes
<html lang="zh-CN">, which imposes a specific language/locale on all output regardless of the source markdown or user preference. The file does not offer a locale option or explain that the tool is intended only for a China-specific context.- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 80% confidence
- Finding
This markdown file includes normative references specifically to Chinese-language versions of external standards links, which signals a Chinese-locale default in the skill's documentation. Under the policy, locale-specific language should be opt-in or clearly justified as region-specific; this file does not provide that justification.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The markdown content is entirely written in Chinese, including headings and descriptive text, with no indication that the user can choose another language or that the file is intentionally limited to a Chinese-speaking audience. Under the policy criteria, forcing a specific language without user opt-in is a natural-language policy concern.
- Content
Static analysis
No suspicious patterns detected.