T08 · Insecure Dependencies
Warning
- Location
scripts/parse_document.py:26- Finding
Dependency Installation Instructions Lack Artifact Integrity Verification
- Content
View full analysis
- Remediation
View remediation
Security audit
8D报告评价技能
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed Chinese-language 8D report review helper that locally parses user-provided documents and gives evaluation guidance, with manageable dependency and data-disclosure cautions.
Install only if you are comfortable processing 8D reports in this environment. Confirm the exact document file before use, avoid feeding reports with unnecessary confidential data, and install the Python dependencies in a virtual environment from a trusted package source.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)
Tp2
High
- Category
- MCP Tool Poisoning
- Confidence
- 85% confidence
- Finding
Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.
- Content
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 98% confidence
- Finding
声明描述的是一个面向SQE/质量工程师的8D报告评审能力，核心应包括内容理解、步骤质量评价、根因分析工具检查、措施有效性判断以及输出审查意见。代码中仅包含文件格式检测、文本清洗、Word/PDF/Excel解析和JSON打印，属于前置的数据提取/预处理能力。虽然对象是8D报告文档，但其主要行为与声明的核心目的存在明显差异，因此应判定为描述与行为不匹配。
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
技能要求从当前工作目录解析用户上传的8D报告，并在后续“将解析清洗后的完整内容呈现给用户”，但未提供任何最小化披露、敏感信息识别或用户确认范围控制。8D报告常包含供应商信息、客户投诉、缺陷明细、批次/料号、责任人等敏感业务数据，若被完整回显、误选文件或跨会话残留读取，可能导致数据过度暴露。
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
This markdown file presents all instructions and evaluation criteria exclusively in Chinese, with no indication that users can select another language or that the Chinese-only constraint is optional. Under the policy rule for natural-language issues, forcing a specific language without user opt-in is a locale/language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The module docstring and all user-facing descriptions are written only in Chinese, and the script provides no option for users to select another language or locale. Under the language/locale policy, forcing a specific language without opt-in is a natural-language policy violation unless the regional constraint is explicitly justified.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 83% confidence
- Finding
The skill name, description, and all operating instructions are written only in Chinese, and the TRACE section states it supports Chinese interaction. There is no indication that users may choose another language or that the Chinese-only constraint is a documented regional requirement.
- Content
Static analysis
No suspicious patterns detected.