Back to skill

Security audit

bozo-writer

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Chinese AI short-video writing template with no code execution, data access, persistence, or hidden system behavior.

Install this if you want Chinese AI-topic short-video scripts in the specified eight-part口播 format. Avoid relying on it for general writing, non-Chinese content, or non-video formats unless you explicitly want that style.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The trigger description is broad enough to activate on generic writing or rewriting requests, which can cause the skill to be selected outside its intended narrow AI short-video use case. That creates prompt-scope confusion and can override user intent with irrelevant or undesired stylistic constraints, especially in multi-skill environments.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The skill hard-codes a Chinese-language and Chinese-internet style persona without asking for user preference, which can silently steer outputs into a locale the user did not request. This is primarily a scope and user-intent alignment issue rather than a direct security exploit, but it can still degrade reliability and cause inappropriate responses.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The output section mandates Chinese internet short-video style and structure with no language or locale choice, which can force responses into a format misaligned with the user's needs. In practice this may cause unwanted transformation of benign requests and reduce transparency about why the assistant is responding in a specific style.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.