Tp2
High
- Category
- MCP Tool Poisoning
- Confidence
- 85% confidence
- Finding
Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.
- Content
Security audit
IATF16949质量管理体系策划
Security checks for vulnerabilities and agentic risk
Overview
This is a static Chinese-language IATF16949 quality-management guidance skill with no evidence of unsafe code, hidden behavior, or data access.
Install this if you want Chinese-language support for IATF16949 quality-system planning. Review generated documents with a qualified quality or certification professional, and note that some referenced procedure templates are absent and the internal-audit reference is empty.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (7)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The listed trigger conditions use high-level phrases like '体系建设需求', '认证准备', '过程优化', and '审核策划' without defining specific invocation phrases, scope limits, or exclusion conditions. In a markdown skill description, this can make activation ambiguous because many ordinary enterprise consulting requests could fit these labels.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
This markdown template is entirely written in Chinese and presents the skill content in a single required language, with no indication that users may choose another language or locale. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly documented and justified.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The markdown template is entirely written in Chinese and provides no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The file title and all instructional content are written entirely in Chinese, with no indication that the skill is region-specific or that users may choose another language. Under the policy, a fixed language without user opt-in can be a natural-language policy violation.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
This markdown file presents all instructional content in a single language and does not indicate that users can choose another language or that the skill is intentionally restricted to a Chinese-speaking audience. Under the language/locale policy, forcing one language without user opt-in can be a natural-language policy violation.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
This markdown file contains natural-language content exclusively in Chinese and does not indicate that users may choose another language or that the locale restriction is intentional. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.
- Content