Security audit

Vocabulary Lookup

Security checks for vulnerabilities and agentic risk

Overview

The vocabulary lookup tool is mostly read-only and purpose-aligned, but it declares an unused, unpinned third-party package install that users should review before installing.

Review or decline the optional edge-tts pip install unless you specifically need and trust that dependency; the lookup script itself appears to read local dictionary files only, but the package install adds unnecessary supply-chain risk. Also expect Chinese-language output and configure the dictionary path only to files you intend the tool to read.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Note

Location: SKILL.md:17
Finding: Unpinned and Unused Third-Party Dependency Installation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 70% confidence
Finding: Without declared permissions the skill's intent is opaque and cannot be validated.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The manifest description states the skill provides word details in Chinese, and the README further presents the skill entirely in Chinese-oriented output. This indicates a language/locale constraint without offering the user a language choice or documenting that the skill is specifically Chinese-localized.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The module title, description, CLI help text, and runtime messages are written exclusively in Chinese, which imposes a specific language/locale on users. The file does not offer any language choice or explain why Chinese-only output is required for a region-specific use case.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Low

Category: Not specified by scanner
Confidence: 80% confidence
Finding: The manifest describes a dictionary lookup tool for querying word details. While reading a local dictionary file is expected, consulting process environment variables to control file access is an extra capability not mentioned in the stated purpose and is not necessary for the core lookup behavior itself.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.