Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
加盟抽成与最低保底核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local franchise-settlement worksheet checker, and I found no hidden network use, persistence, credential access, or destructive behavior.
Install it only if you want a Chinese-language, local checker for franchise royalty settlement tables. Review the listed free-version limits before relying on its results, and do not treat its calculations as contract, legal, or tax advice.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (6)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The trigger list includes broad business terms such as '最低保底' and '连锁结算' that are not uniquely tied to this exact skill, which can cause the skill to activate in conversations where the user did not intend a franchise royalty worksheet audit. Unintended invocation can route sensitive business-financial content into the wrong workflow, creating confusion, incorrect task selection, or unnecessary exposure of proprietary data to the skill runtime.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The file’s natural-language comments, labels, advice strings, and contract description are written entirely in Chinese, indicating the skill is designed to operate in a single language. Under the policy, forcing a specific language without user opt-in is a locale/language policy violation unless the constraint is explicitly justified, which is not documented here.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
This code embeds all natural-language instructions, errors, and usage text in Chinese, including the capability description and command help. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified, which is not documented here.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 80% confidence
- Finding
L075 的注释写明“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，这与该技能清单和其余帮助文案反复强调的输入应为“加盟结算表（含表头）”不一致。代码后续虽然确实把任意纯文本装入 payload.text，但整体意图文档在这里把可接受材料范围表述得比技能宣称用途更宽，构成文档与技能意图的偏离。
- Content