Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例（样例本身就是一张自洽的表）
Security audit
门店毛利与损耗核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This is a local Node.js checker for Chinese store gross-margin tables, and I found no hidden network, credential, persistence, or destructive behavior.
Install this only if you are comfortable using a Chinese-language local CLI for store gross-margin table checks. It may process sensitive business data from the input file you provide, but the reviewed artifact keeps that processing local and does not show network transfer or persistence.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (7)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例（样例本身就是一张自洽的表）
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例（样例本身就是一张自洽的表）
Lp1
High
- Category
- MCP Least Privilege
- Confidence
- 75% confidence
- Finding
The skill uses 'env' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
This JavaScript file contains extensive user-facing natural-language instructions and messages entirely in Chinese, including operational guidance and result text, but does not provide any opt-in or alternative locale. Under the policy, forcing a specific language without user choice is a natural-language policy violation.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
L075 的注释说明“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，但该脚本整体用途是门店销售与成本毛利表核对，帮助文本也要求输入含表头的毛利表。这里的文档示例把技能输入说成“合同全文”，与实际意图和其余说明明显不一致，容易误导开发者或调用方对技能用途的理解。
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The JSON payload consists entirely of Chinese headers and values, indicating the skill content is fixed to a specific language/locale. Under the policy, locale-specific behavior should offer user opt-in or clearly document and justify the constraint, which is not present in this file.
- Content