Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
软件服务商账单与用量核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local invoice-and-usage checker whose scripts match the stated purpose and do not show network use, persistence, credential access, or data mutation.
Install only if you are comfortable using a Chinese-language local Node.js tool for SaaS invoice and usage-table reconciliation. It may process sensitive billing data, but the inspected code keeps processing local and does not write files or send data out; users should still verify findings against contracts, vendor systems, and internal records before acting on payment decisions.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
This JavaScript file contains its primary documentation, prompts, error messages, output notes, and labels entirely in Chinese, which effectively constrains the skill's interaction language. The file does not present any user opt-in, locale selection, or justification for a Chinese-only experience, so it constitutes a natural-language locale policy issue.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The JSON payload consists entirely of Chinese headers, values, and notes, with no indication that the skill offers a language choice or that Chinese-only output is a justified regional requirement. Under the policy for natural-language violations, forcing a specific language without user opt-in is in scope across all file types.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
L075 的注释写明“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，这与文件顶部、帮助文案和 manifest 中反复强调的输入应为软件服务商账单与用量明细表不一致。代码实际只是把非 JSON 内容放入 text 字段交给核对引擎，文档示例却将范围扩展到“合同全文”，形成意图层面的误导。
- Content