Security audit

today-in-history

Security checks for vulnerabilities and agentic risk

Overview

This skill only tells the agent to fetch historical date events from Wikipedia and format them in Chinese, with minor trigger-wording caveats.

Installers should expect this skill to contact Wikipedia for public historical-event data and produce concise Chinese responses. Consider tightening the broad trigger phrase if you want to avoid accidental activation for current-news questions.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The manifest says the skill triggers when users ask '历史上的今天', '今天发生了什么', or about historical events on a given date. In particular, '今天发生了什么' is broad everyday wording and the file does not provide exclusions or clearer constraints to distinguish general current-events questions from this history skill.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The file instructs the model to produce '中文描述', which imposes a specific language requirement. There is no indication that the user can opt into another language or that the skill is intentionally limited to a Chinese-only audience for a documented reason.

Vague Triggers

Low

Confidence: 85% confidence
Finding: The instruction says to use the skill when the user asks about '历史上的今天或特定日期的历史事件', but it does not specify exact trigger phrases, exclusions, or when similar date-related questions should not invoke it. This can lead to unintended activation for loosely related date/history prompts.