Back to skill

Security audit

Marketing Scenario Simulator

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Korean-language marketing simulation workflow and does not show hidden code execution, data access, persistence, or destructive behavior.

Install this if you want a Korean marketing-analysis simulator that coordinates several agent perspectives. Be aware that outputs are hardcoded to Korean and the workflow may spawn five sequential analysis agents, so confirm that behavior fits your cost, time, and language expectations.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The skill explicitly requires the Scenario Agent to 'Respond in Korean,' which imposes a specific language on users. The file contains similar mandatory Korean-only instructions for other agents and output examples, but does not offer opt-in, language selection, or a documented region-specific reason.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The Consumer Agent 1 prompt ends with 'Korean,' making the agent respond in a fixed language regardless of user preference. This is a natural-language policy issue because no language choice or opt-in mechanism is provided.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The Consumer Agent 2 prompt also requires Korean output unconditionally. Across the skill, these repeated fixed-language directives indicate a language policy violation rather than a one-off example.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The Marketing Agent prompt says 'Under 200 words. Korean.' This enforces a single locale/language behavior without any mention of user preference or justified regional scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The Expert Agent prompt mandates Korean responses, continuing the skill-wide pattern of forced language selection. No opt-in or explicit regional limitation is stated elsewhere in the markdown.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.