Security audit

Guaikei Kuaishou Visible Content Fetcher

Security checks for vulnerabilities and agentic risk

Overview

The skill is a disclosed command-line Kuaishou public-data fetcher, with expected API-token network use and local result logs to consider.

Install only if you are comfortable using a third-party Guaikei API token and sending Kuaishou keywords or URLs to www.guaikei.com. Review and delete the generated logs when they may contain sensitive business research, user comments, or data you do not want retained locally.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (18)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The README states that all task results are automatically saved to the logs/ directory, but it does not clearly warn that scraped public-platform data, URLs, keywords, and analysis outputs may persist locally. This creates a privacy and data-governance risk because users may unknowingly retain potentially sensitive marketing intelligence or comment data on disk, where it could be exposed to other local users, backups, or accidental sharing.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file presents all operational instructions and examples only in Chinese, which can amount to a language/locale policy violation when no user opt-in or alternative language is offered. The heading includes an English gloss, but the substantive usage guidance remains Chinese-only.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The CLI writes fetched comment data to a local JSON file automatically after a successful run, without any consent prompt, opt-in flag, or visible warning in this file. Because comments may contain personal or sensitive user-generated content, this creates a privacy and data-retention risk on shared systems or environments where local artifacts are collected, synced, or exposed.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The CLI writes the full result set, including profile/post data derived from the target account, to a local JSON file automatically and without explicit user consent, warning, or an option to disable persistence. This creates a privacy and data-handling risk because sensitive or regulated data may be stored on disk unexpectedly, where it can later be accessed by other local users, backups, log collectors, or malware.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: This code presents its documentation and CLI error/help text in Chinese, which imposes a specific language on users without any opt-in or alternative locale support. The same pattern appears throughout the file's thrown errors and help output, making the locale constraint effectively mandatory rather than user-selectable.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The function emits all visible status and error messages in Chinese, which enforces a specific language for users interacting with this skill. Under the policy, hard-coded locale behavior should be flagged unless the skill offers user choice or clearly documents a justified locale restriction.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This code constructs and sends a POST request to a remote host, including a TOKEN header and JSON payload. There is no confirmation prompt, user-visible logging, or inline warning indicating that user or system data may be transmitted off-host, which matches the code-file criteria for missing user warnings.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This function performs a remote GET request with a TOKEN header and query parameters, including a timestamp and skill identifier. The file contains no confirmation, user-visible notice, or explanatory comment warning that data and authentication material will be sent over the network.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This JavaScript file contains multiple user-facing error strings exclusively in Chinese, such as the validation errors at L05, L10, L14, L18, L23, L50, L54, L59, and L64. Under the policy rule, forcing a specific language without user opt-in or a documented locale justification is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 80% confidence
Finding: The support section specifies Chinese-language channels and a WeChat contact, while the skill overall is primarily described in Chinese with no explicit user choice of language or locale. This can be a natural-language policy concern when organizational policy requires offering language choice rather than implicitly forcing one locale.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The package description is written entirely in Chinese, which can impose a language choice on users without offering any alternative or opt-in. This is a natural-language policy concern because the manifest provides no indication that the skill is region-specific or that other language options are available.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The natural-language instructions, warnings, and usage guidance are all presented in Chinese, with no indication that users can choose another language or that the skill is intentionally limited to Chinese-speaking users. This can violate language/locale policy when a skill implicitly forces a language without opt-in or justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 82% confidence
Finding: The heading is written primarily in Chinese, which can indicate a fixed language choice in user-facing skill materials. The file does not mention that the skill is region-specific or provide any language/locale opt-in, so this may conflict with language-choice policy expectations.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This code presents its command descriptions, help text, warnings, and status messages only in Chinese, with no indication that users can choose another language. That is a natural-language locale policy concern because the skill imposes a specific language experience without opt-in or documented justification.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 80% confidence
Finding: This code writes arbitrary provided content into a log file under a local logs directory. Although it prints a success message after saving, there is no prior user-facing warning, comment, or docstring disclosing that the function persists data to disk, which is relevant for a safety-sensitive file write operation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The thrown error string is hardcoded in Chinese (重试${maxAttempts}次后失败), which forces a specific language in a user-visible message. For a general utility file, there is no indication that the skill is region-specific or that users can opt into this locale.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The user-facing warning and info strings are written only in Chinese, and the file comments and messaging provide no indication that the skill is limited to Chinese-speaking users or offers a language choice. This can violate a language/locale policy when skills are expected to avoid forcing a specific language without user opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This JavaScript file contains hard-coded Chinese user-facing strings in the module comment and printed banner text. Because SQP-3 applies to all file types and flags language/locale policy violations, this is a policy concern when the skill does not offer a language choice or justify a Chinese-only locale.
Content: No source excerpt is available for this finding.

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: SKILL.md:15