Back to skill

Security audit

samOnboarding山姆超市产品上架指导

Security checks for vulnerabilities and agentic risk

Overview

This is a static Chinese-language guide for Sam's Club food product onboarding, with no code execution, persistence, or hidden data handling found.

Before installing, treat this as business and compliance guidance rather than official legal advice. Verify current Sam's Club supplier requirements and food regulations through official sources, and only submit sensitive business, bank, tax, or license information through verified official channels.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The manifest description says to use the skill whenever the user needs onboarding guidance, food compliance consulting, or response to onboarding problems, which are broad categories without exclusions or negative examples. This can overlap with general food compliance or retail consulting conversations and may cause unintended invocation beyond the intended Sam's Club onboarding scope.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The trigger condition includes any user asking about Sam's onboarding process, food compliance requirements, onboarding issue handling, or providing customer needs for feasibility analysis. It does not clearly distinguish this skill from broader compliance advisory tasks, and it provides no negative examples or constraints on scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

SQP-3 applies to all file types and covers language or locale policy violations. This guide forces a specific language for all readers and does not provide user opt-in, alternatives, or a justification that the skill is restricted to a Chinese-speaking or China-only compliance context.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

This markdown file contains user-facing operational guidance exclusively in Chinese, and nowhere indicates that the skill is region-specific or that another language can be used. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file presents all instructions and checklist items exclusively in Chinese, and nowhere indicates that the user may choose another language or that the checklist is intentionally limited to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.