Security audit

Pans Competitor Compare

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local GPU cloud pricing comparison helper with no evidence of hidden network access, credential use, persistence, or destructive behavior.

Before installing, understand that this is a local comparison tool with static pricing data, not a live pricing fetcher. It may write an output file only when you pass --output, and you should verify current cloud prices before making purchasing decisions.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 70% confidence
Finding: Without declared permissions the skill's intent is opaque and cannot be validated.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The description and documentation are written entirely in Chinese and present the skill as operating in Chinese without any stated user opt-in or multilingual option. This can constitute a language policy violation when a skill implicitly forces one locale or language.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The listed trigger words include generic phrases such as "竞品对比", "GPU价格", and especially "pricing comparison", which are broad enough to match ordinary discussion rather than a narrowly scoped invocation. The file does not provide exclusion conditions or negative examples to clarify when the skill should or should not activate.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This reference file switches from English headings and notes to Chinese headings and pricing notes, which can force a specific language experience on users without opt-in. The policy for this category flags language/locale constraints unless the file explicitly offers a choice or justifies the locale-specific content.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: This code file contains user-facing natural-language descriptions in Chinese in the module docstring, and the CLI help text is likewise Chinese-only. Under the language/locale policy, forcing a specific language without user opt-in can be a policy violation when no alternative or justification is provided.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.