Tp2
High
- Category
- MCP Tool Poisoning
- Confidence
- 85% confidence
- Finding
Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.
- Content
Security audit
CP控制计划技能
Security checks for vulnerabilities and agentic risk
Overview
This skill is a coherent Chinese-language quality-engineering helper that reads user-supplied CP data and writes local reports/charts without hidden network, persistence, credential, or privilege behavior.
Install only if you want a Chinese-language CP/control-plan workflow. Review any CSV, Excel, or JSON paths before running the scripts, because they will read the selected input files and create or overwrite the selected local output files/directories.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (8)
Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 86% confidence
- Finding
The skill instructs use of local scripts that read input files and write output artifacts, but the manifest declares no explicit tool scope or permissions. In an agent platform, this can create an authorization gap where file access occurs without clear least-privilege boundaries, increasing the chance of unintended file reads/writes or unsafe execution assumptions.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The trigger conditions are broad enough to overlap with many routine quality-engineering requests, which can cause the skill to activate in contexts not specifically intended by the author. Over-broad activation is dangerous because this skill recommends file-based analysis scripts and document generation, potentially causing unnecessary access to local data or execution-related workflows when a narrower advisory response would be safer.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
This code file contains natural-language strings that force a specific language/locale for the skill's interface and documentation. Under the policy, language constraints should either be user-selectable or clearly justified as region-specific; neither is present here.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 81% confidence
- Finding
该 Markdown 文档全文以中文撰写，标题和内容均未说明仅适用于中文使用者，也未提供其他语言版本或用户选择语言的方式。根据规则，若技能内容强制特定语言且没有用户选择或明确合理的区域性限定，可能构成自然语言政策违规。
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
This code file contains user-facing natural-language content such as the module description, CLI help text, warnings, and status messages entirely in Chinese. Under the policy rule, forcing a specific language without user opt-in is a locale/language policy concern unless the regional constraint is explicitly justified.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
This code file contains user-facing natural-language strings and documentation entirely in Chinese, including the script description and later status messages, with no indication that the user can select another language. The policy for this category says to flag skills that force a specific language without user opt-in.
- Content
Static analysis
No suspicious patterns detected.