Security audit

废料边角料销售与回收结算核对（免费版）

Security checks for vulnerabilities and agentic risk

Overview

The skill is a local scrap-sale ledger checker that reads user-provided ledger text/files and performs deterministic calculations without network access, persistence, or mutation.

Install only if you are comfortable letting the agent read the ledger file you choose and display calculated findings in the conversation. The tool is local and limited, but it does not replace a full audit and explicitly omits several higher-level checks such as contract-price underbilling and unpaid receivables.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Ae1

High

Category: analysis-evasion
Content: node scripts/run.mjs --sample # 先看内置样例
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected

Ae1

High

Category: analysis-evasion
Content: node scripts/run.mjs --sample # 先看内置样例
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected

Ae1

High

Category: analysis-evasion
Content: node scripts/run.mjs --sample # 先看内置样例
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected

Intent-Code Divergence

Low

Confidence: 95% confidence
Finding: L075 的注释写明“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，但该技能清单、帮助文本和整体实现都围绕废料边角料销售与回收结算台账核对展开。这里的内联文档把输入对象举例成“合同全文”，会让开发者误解该技能适用范围，属于文档意图与代码/技能定位的主动性偏离。

Static analysis

No suspicious patterns detected.