Terminal UI Website Design

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 8:10 AM UTC
• Version: 1.0.0

Overview

This is a static terminal-themed UI design-system skill; the flagged comments and Chinese labels are template content, not hidden behavior or unsafe access.

Installers should treat this as a UI style reference. Review and localize the sample Chinese labels before reusing the templates in a production app, and only include the sample localStorage theme code if browser theme persistence is desired.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (5)

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 237)May include surrounding context.

ready

```

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/component-templates.html (reported line 1)May include surrounding context.

html

<!-- ===================================
     Terminal UI Design System
     Component Templates
     =================================== -->

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The sample theme toggle uses title="切换主题" and aria-label="切换主题", which forces a specific language in user-facing text. The document does not indicate that this locale choice is optional, configurable, or justified as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 85% confidence

Finding

This CSS file contains extensive natural-language comments in Chinese, such as section headings and explanatory notes, with no indication that the skill is intended only for Chinese-speaking users or that multilingual support is available. Under the policy rule for language/locale constraints, this is a natural-language locale choice imposed without user opt-in or justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

This HTML template contains user-facing natural-language strings in Chinese, beginning with the section heading at L007 and continuing throughout the file. Because the file does not indicate that the interface is region-specific or provide any user opt-in or language-selection mechanism, it appears to enforce a specific locale.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.