Security audit

Visa Business Planner

Security checks for vulnerabilities and agentic risk

Overview

This is a simple Japan visa business-plan helper with no hidden execution, data access, persistence, or privilege behavior, though users should verify its legal assumptions.

Install only if you want Japan-focused business-plan drafting support. Treat the visa and legal requirement text as drafting guidance, not legal advice, and verify current requirements before relying on the output or sharing personal eligibility details.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The usage instruction includes a highly generic invocation pattern ('Generate business plan for [business idea]') that overlaps with normal user requests. In agent frameworks that auto-route based on loose phrase matching, this can cause the skill to activate unexpectedly on ordinary planning prompts, increasing the attack surface and potentially exposing users to unintended tool use or unreviewed outputs.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: The template states that applicants should ensure their plan meets Japanese proficiency expectations as if this were a requirement, without qualification or user choice. This can pressure users to disclose sensitive language-proficiency information or misstate eligibility criteria, which is risky in an immigration-related context where users may rely on the template for compliance-sensitive decisions.

Natural-Language Policy Violations

Low

Confidence: 90% confidence
Finding: Requiring the user's Japanese language proficiency in the management section prompts collection of personal profile data beyond what may be necessary for a generic business-plan template. In a visa-support context, this can lead to oversharing of personal information and creates a misleading impression that such disclosure is mandatory for all applicants.

Natural-Language Policy Violations

Low

Confidence: 82% confidence
Finding: The document repeatedly frames the business and services as inherently bilingual in English and Japanese, including the title, mission, overview, target audience, and products/services. This can be interpreted as a language/locale constraint without any stated user choice, opt-in, or explicit justification as a region-specific requirement.

Natural-Language Policy Violations

Low

Confidence: 81% confidence
Finding: The document is explicitly scoped to "Japanese Business Manager Visa Business Plans" and all referenced resources are Japan-specific, which imposes a locale-specific workflow without stating user choice or opt-in. Under the policy, locale constraints should either offer a choice or be clearly documented and justified as region-specific.

Static analysis

No suspicious patterns detected.