Security audit

Bytesagain Social Commerce Video Kit

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local ecommerce copy drafting helper with no evidence of credential access, network execution, persistence, or destructive behavior.

Review generated marketplace copy before publishing, especially claims, localization, and platform policy compliance. The skill does not appear to upload products, request seller credentials, or persist changes.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (10)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 90% confidence
Finding: The declared description is partially accurate because the exposed commands do include hook, script, live, caption, and brief-related functionality aligned with social commerce video drafting. However, the code’s actual scope is materially broader than described. Internally it implements many additional capabilities for general ecommerce copywriting and optimization across multiple marketplaces, not just TikTok Shop or short-video commerce. Even though only a subset of commands is exposed in the final CLI dispatch, the supplied code chunk clearly contains substantial undeclared functionality for titles, bullets, SEO, FAQs, audits, compliance, localization, and product detail page content. That makes the description too narrow and not an accurate representation of the full behavior shown in the code chunk.
Content: No source excerpt is available for this finding.

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 21)May include surrounding context.
md
bash scripts/script.sh brief --product "portable blender" --channel "Amazon" --features "USB-C charging,400ml cup,easy cleaning" --keywords "portable blender,sm

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 26)May include surrounding context.
md
bash scripts/script.sh brief --product "portable blender" --channel "Amazon" --features "USB-C charging,400ml cup,easy cleaning" --keywords "portable blender,sm

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 31)May include surrounding context.
md
bash scripts/script.sh brief --product "portable blender" --channel "Amazon" --features "USB-C charging,400ml cup,easy cleaning" --keywords "portable blender,sm

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 36)May include surrounding context.
md
bash scripts/script.sh brief --product "portable blender" --channel "Amazon" --features "USB-C charging,400ml cup,easy cleaning" --keywords "portable blender,sm

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 41)May include surrounding context.
md
bash scripts/script.sh brief --product "portable blender" --channel "Amazon" --features "USB-C charging,400ml cup,easy cleaning" --keywords "portable blender,sm

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 46)May include surrounding context.
md
bash scripts/script.sh brief --product "portable blender" --channel "Amazon" --features "USB-C charging,400ml cup,easy cleaning" --keywords "portable blender,sm

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 86% confidence
Finding: The script sets LANG="en" by default, and later emits Chinese titles for Taobao/Pinduoduo channels regardless of whether the user explicitly requested that language. This can force a locale/language outcome based on channel selection rather than user choice, which is a natural-language policy concern under the locale policy rule.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The manifest describes a skill for drafting TikTok Shop and short-video commerce assets such as hooks, UGC scripts, livestream cues, captions, and creator briefs. However, the code also generates marketplace listing titles, product detail pages, SEO metadata, FAQ, keyword clusters, localization, category copy, and a 14-day ecommerce SEO plan across Amazon, Shopify, Taobao, and Pinduoduo, which materially exceeds that described scope.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Low

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The usage output lists only 'brief hook script live caption demo help version', but the file actually exposes many additional command handlers such as title, bullets, compare, audit, pdp, seo, faq, keywords, rewrite, category, calendar, map, localize, tone, compliance, and bundle. This is not merely incomplete documentation of options; it actively presents a narrower command surface than the implemented code.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.