Security audit

prompt-bozo

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only prompt-writing skill with no code execution, network access, credential use, or persistence; its main caveat is that it strongly defaults to Chinese output.

Install this if you want a Chinese-language AI image/video prompt assistant. Be aware it may answer in Chinese even when another language would be preferable, and its Chinese-style keywords may activate style guidance for broad cultural or historical requests.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Behavioral ASTexec() Call, eval() Call, Dynamic Import
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (9)

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The skill mandates Chinese-only output regardless of user preference, which overrides normal user control and can degrade usability or cause downstream workflow failures for users expecting another language. In a prompt-generation skill this is not a direct security exploit, but it is a real policy/control issue because hardcoded output constraints can mislead users and break integrations that rely on language selection.

Natural-Language Policy Violations

Medium

Confidence: 94% confidence
Finding: This JSON eval file consistently defines prompts and expected outputs in Chinese, indicating the skill is designed around a single language with no visible opt-in, fallback, or locale choice. Under the policy, forcing a specific language without user choice is a natural-language policy concern unless the locale restriction is clearly documented and justified, which is not present here.

Vague Triggers

Medium

Confidence: 93% confidence
Finding: The trigger list is broad enough to match common aesthetic or cultural terms such as “中国风”“古风” and dynasty names, which can cause the skill to activate for loosely related requests. In an agent setting, over-broad activation can steer conversations unexpectedly, inject irrelevant prompt-building behavior, and reduce user control over which skill is invoked.

Natural-Language Policy Violations

Medium

Confidence: 91% confidence
Finding: The document explicitly requires that the final output be a coherent Chinese paragraph. This is a natural-language locale constraint, and the file does not mention any user opt-in, alternative language support, or justification for forcing Chinese output.

Natural-Language Policy Violations

Medium

Confidence: 89% confidence
Finding: The entire skill file is written only in Chinese and provides no indication that other languages are supported or that the language choice is optional. Under the stated policy, language constraints should either be user-selectable or clearly justified as region-specific, which is not present here.

Natural-Language Policy Violations

Low

Confidence: 87% confidence
Finding: This markdown file presents all instructional content in a single language and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the natural-language policy rules, forcing a specific language without opt-in can be a policy concern.

Natural-Language Policy Violations

Low

Confidence: 88% confidence
Finding: The document title and explanatory text are presented in Chinese, while the skill content is intended as general character-design guidance rather than a clearly region-specific tool. Under the language/locale policy, forcing a specific language without opt-in can be a natural-language policy violation when no alternative or user choice is offered.

Natural-Language Policy Violations

Low

Confidence: 71% confidence
Finding: 全文标题、触发说明和模板均仅以中文提供，未说明是否允许根据用户偏好切换语言或输出本地化版本。若该技能面向通用用户使用，这种单一语言默认可能与要求提供语言选择或用户自选语言的组织策略不一致。

Natural-Language Policy Violations

Low

Confidence: 88% confidence
Finding: This markdown file's headings, instructions, and examples are entirely in Chinese, which can constitute a language/locale policy issue when no user opt-in or justification is provided. The file does not indicate that the skill is intended only for Chinese-speaking users or offer an alternative language option.

Static analysis

No suspicious patterns detected.