审计与内控合规专家

• Outcome: Pass
• Latest audit: Sep 23, 2026 · 9:20 AM UTC
• Version: 1.0.10

Overview

This skill is a local audit-checking tool whose code and manifest match its stated six-part purpose, with only a small local usage counter to note.

Install only if you are comfortable running a local Node-based audit checker on pasted business data. It appears to keep data local, but it is not a substitute for professional audit judgment and it creates a small local trial-use counter in your home directory.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (116)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 97% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 97% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 97% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 97% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 97% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 97% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 97% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 96% confidence
• Finding: If only related-party transaction checks are implemented while the skill claims six-domain automatic triage, users may overestimate both breadth and neutrality of results. Undisclosed free/paid capability differences further increase risk by making outputs dependent on mode in ways not apparent from the public description.

Static analysis

No suspicious patterns detected.