成本与存货专家

• Outcome: Pass
• Latest audit: Sep 23, 2026 · 9:22 AM UTC
• Version: 1.0.11

Overview

This appears to be a local accounting table-checking skill, with caveats around a local trial counter and some finance/tax wording that users should not treat as professional advice.

Install only if you are comfortable running local Node-based checks on Chinese-language business/accounting tables. The package did not show network or credential use, but it does keep a local use counter and stops after five runs; also, treat tax, approval, and allocation conclusions as prompts for human review rather than final legal or accounting advice.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (118)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: If the actual function is warehouse turnover and stale inventory only, the broad expert claims remain materially misleading. In operations and finance workflows, that can distort inventory governance by implying other substantive checks also ran.

Static analysis

No suspicious patterns detected.