T09 · Insecure Skill Coding Practices
Warning
- Location
script/main.py:47- Finding
Unbounded User-Controlled Regular Expressions Enable Denial of Service
- Content
View full analysis
- Remediation
View remediation
Security audit
RegexAssistant
Security checks for vulnerabilities and agentic risk
Overview
This is a localized regex testing helper that runs a small local Python CLI and does not show hidden persistence, network access, credential handling, or destructive behavior.
Install only if Chinese-language CLI output is acceptable. Avoid running untrusted or very complex regex patterns against large text, because a catastrophic-backtracking pattern may stall the skill process until stopped.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The skill metadata and main description are written entirely in Chinese, and the examples/pattern catalog are tailored to Chinese-specific data formats such as mainland China phone numbers and ID cards. There is no statement that users may choose another language or that the locale limitation is intentional and justified, which creates a language/locale policy concern.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The file’s natural-language description and all user-facing CLI messages are written in Chinese, and the predefined patterns/descriptions are specifically oriented to Chinese-language usage. There is no indication that users can choose another language or locale, which may violate a language-choice policy when such choice is expected.
- Content
Static analysis
No suspicious patterns detected.