Back to skill

Security audit

Storyboard 9Grid

Security checks for vulnerabilities and agentic risk

Overview

This is a narrow storyboard-prompting skill with no executable code, persistence, or sensitive access.

This skill appears safe to install for storyboard prompt generation. Be aware that broad Chinese trigger terms like "九宫格" may invoke it in some unrelated contexts, so confirm intent if activation seems ambiguous.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The trigger phrases are broad and overlap with common user language such as '分镜', '九宫格', and '把这个脚本转成画面', which can cause the skill to activate outside narrowly intended contexts. Unintended invocation can route unrelated user content into this skill, causing confusion, incorrect behavior, and possible prompt-surface expansion if sensitive or irrelevant text is processed as screenplay material.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The phrase "请给我一段剧本或故事大纲,我来拆成九宫格电影分镜。" reads like a general capability description rather than a narrowly scoped invocation condition. In a manifest file, this can create ambiguity about when the skill should activate and lacks negative examples or explicit trigger boundaries.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.