Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
OTA佣金与净结算核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill locally checks hotel OTA settlement tables and does not show hidden network, persistence, credential, or destructive behavior.
Install only if you are comfortable running a local Node script on settlement-table text you provide. Review the listed free-tier omissions before relying on the result, especially because it does not validate contract terms or undisclosed deductions.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The description says the skill is triggered by phrases including “房费结算” and “佣金算错”. These are relatively broad natural phrases that could appear in ordinary discussion about hotel finances, and the file does not provide constraints or negative examples to clarify when the skill should or should not activate.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The file’s natural-language interface and user-facing advice/messages are written entirely in Chinese, including the declared contract and all insufficiency/output guidance. There is no indication that the skill is region-specific only, nor any opt-in or alternative language handling, so this creates a locale policy risk under the language-choice rule.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
L075 的注释写明“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，但同文件其余说明多次限定输入应为“渠道结算核对表（含表头）”并在材料不足时不给结论。这里的文档示例将输入范围描述为合同全文，和代码围绕结算表核对的实际意图相矛盾，属于文档与实现意图的不一致。
- Content