Back to skill

Security audit

Product Image Generator

Security checks for vulnerabilities and agentic risk

Overview

This Markdown-only skill coherently guides users through creating e-commerce product images with local project outputs and disclosed preference storage.

Install only if you want an agent to create product-image planning files, prompts, and generated images in your workspace. Review the first-time preferences before saving them, and provide reference images or product details only when you are comfortable using them for image generation.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (7)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The first-time setup hard-codes the language preference to only Chinese, English, or Auto-detect. This is a natural-language locale restriction, and the document does not justify why the skill must be limited to those languages or offer a general user-provided alternative.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
83% confidence
Finding

This file presents the product descriptions and embedded example content in Chinese, while the usage instructions are in English, creating a mixed-language experience that effectively assumes Chinese for core skill input content. Under the policy, forcing a specific language without user opt-in or clear regional justification is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

Line L109 states 'Use Chinese text for descriptions' as a blanket instruction. This is a natural-language locale policy concern because it mandates a specific language without user opt-in or a clearly stated compliance requirement justifying the constraint.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown file contains only Chinese-language content and does not indicate that the language is optional or user-selected. Under the policy rule for language or locale constraints, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
80% confidence
Finding

The document introduces Pinduoduo using Chinese script alongside the platform name, indicating a China-specific platform context, but it does not present this as an optional locale choice or explicitly justify language/locale constraints for users. Under the policy, natural-language content that effectively fixes a specific language or locale without opt-in can be flagged.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
77% confidence
Finding

The platform fit section includes Taobao, JD, and Pinduoduo as default targets, which implies support for a specific regional marketplace context without any note about locale, region, or user selection. Under the language/locale policy rule, region-specific defaults should be documented or offered as an explicit choice when not clearly justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
82% confidence
Finding

This markdown preset includes a category label that assumes a specific gendered classification for products. Under natural-language policy review, this can be a locale or organizational inclusivity concern when not justified or scoped for a particular market.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.