Security audit

Script to Storyboard

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Chinese screenplay-to-storyboard converter with no hidden network, credential, persistence, or privilege behavior, though its generated CSV should be handled carefully.

Install only if you want a Chinese-oriented screenplay-to-storyboard helper. Treat screenplay input from other people as untrusted, and be cautious opening the generated CSV in Excel or similar spreadsheet tools because formula-like text may be interpreted by the spreadsheet. The examples should also be reviewed or revised if respectful cultural representation matters for your workflow.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/convert.py:201
Finding: CSV Formula Injection Through Unsanitized Storyboard Fields
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (6)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 70% confidence
Finding: Without declared permissions the skill's intent is opaque and cannot be validated.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The manifest says the skill triggers when the user mentions '分镜、storyboard、镜头脚本、剧本转换', but it does not define boundaries, exclusions, or specific invocation phrases. Terms like 'storyboard' and '剧本转换' can appear in ordinary discussion, making activation conditions ambiguous and increasing the risk of unintended invocation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The example storyboard repeatedly uses ethnically specific labels such as '非洲土著人', '土著舞者', and '全体土著' as generic character descriptors without narrative necessity or contextual framing. In a content-generation skill, this can normalize stereotyping and cause the model to reproduce biased or demeaning language in user-facing outputs, especially because examples often act as strong style guides.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The module description is written as a Chinese-only instruction ('将剧本转换为分镜脚本表格'), and all user-facing CLI messages are likewise Chinese-only. For an all-purpose converter script, this indicates a fixed language/locale assumption without opt-in or documented regional limitation, which matches the language-policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 78% confidence
Finding: The skill metadata and instructions are entirely in Chinese and present the behavior as fixed, without indicating that users may choose another language or locale. This can constitute a language-policy issue if the organization expects skills not to force a specific language absent user opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file contains user-facing natural-language instructions exclusively in Chinese, and there is no indication that users can choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the policy rule for language or locale constraints, forcing a specific language without opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.