Tp2
High
- Category
- MCP Tool Poisoning
- Confidence
- 85% confidence
- Finding
Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.
- Content
Security audit
VDA6.5产品审核技能
Security checks for vulnerabilities and agentic risk
Overview
This is a Chinese-language VDA6.5 product-audit guidance skill made of static markdown, with no executable code, install hooks, network behavior, persistence, or hidden tool authority.
Installers should treat this as a static Chinese VDA6.5 audit aid. Before using it on a shop floor, confirm photography is authorized, avoid capturing people or unrelated proprietary/customer data, and store audit photos only through approved company channels.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The skill explicitly instructs users to photograph nonconformities ('不合格项拍照留存') but provides no privacy, confidentiality, or data-handling guidance. In manufacturing and automotive environments, such photos can capture personal data, proprietary designs, customer information, labels, screens, or traceability codes, leading to privacy breaches or leakage of sensitive business information.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
This markdown file is entirely presented in Chinese, and there is no natural-language indication that users may choose another language or that the checklist is intentionally restricted to a Chinese-speaking audience. Under the policy criteria, forcing a specific language without user opt-in can be a locale-policy violation.
- Content
Static analysis
No suspicious patterns detected.