电商与平台结算专家

• Outcome: Pass
• Latest audit: Sep 23, 2026 · 8:21 AM UTC
• Version: 1.0.10

Overview

This is a local e-commerce settlement checking skill, with the main caveat that it keeps a small local trial-use counter.

Installers should know this skill runs local reconciliation checks on pasted financial tables and keeps a hidden local counter for the five-use trial. Review that monetization and local state behavior if you require a fully stateless tool, but no artifact-backed exfiltration or destructive behavior was found.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (82)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 99% confidence
• Finding: The skill advertises itself as a broad router and expert package covering 11 settlement sub-skills, but the findings indicate the implementation may only handle narrow or different scenarios. This is dangerous because users may rely on omitted checks and interpret a clean result as comprehensive coverage, causing financial misstatements, missed disputes, or incorrect operational decisions.

Static analysis

No suspicious patterns detected.