Security audit

Kuai Shou Ai Feed

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Kuaishou public-data collection tool that sends user-requested queries to a third-party API and saves results locally.

Before installing, confirm you are comfortable sending Kuaishou keywords, profile or video URLs, request parameters, and the GUAIKEI_API_TOKEN to the third-party API provider. Treat the generated logs as potentially sensitive research records and delete or protect them if they contain private business targets or analysis outputs.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (21)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The README states that all task results are automatically saved to a local logs/ directory, but it does not clearly warn users that searched keywords, monitored profile URLs, collected comments, and derived analysis outputs may persist on disk. This creates a privacy and operational-security risk because sensitive research targets or collected public data may be exposed to other local users, backups, sync tools, or accidental sharing.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 85% confidence
Finding: The script persists the full request/result payload to disk via log.taskWrite, which includes the normalized URL and retrieved comments. While the operation may support the skill's purpose, this file provides no user-facing disclosure at the write site beyond a success message about fetching comments, so users are not clearly warned that data will also be stored locally.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The calls to post.createPostTask and post.getPostTask send the supplied url, sort, limit, and authentication token to an external API. This file includes progress messaging but does not clearly warn the user that their input will be transmitted off-host, which matters for privacy and safety disclosures.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The code persists the full command output to disk via log.taskWrite, which is a file-write operation affecting local user data. Although the script prints status messages, those messages do not disclose that a file will be created, and there is no confirmation prompt, comment, or docstring in this file warning about the write.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: This code emits fixed Chinese-only user-facing error text, and later success/error messages are also Chinese-only. That creates a language/locale policy issue because the skill does not provide user opt-in, fallback, or any indication that it is intentionally limited to a Chinese-speaking context.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The success and failure messages are hard-coded in Chinese, so all runtime interaction is forced into a single language. Under the stated policy, this should either be user-selectable or explicitly justified as a locale-specific tool.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 85% confidence
Finding: This code performs outbound HTTPS GET and POST requests, including sending a TOKEN header and request data to a remote host. There is no confirmation prompt, logging, comment, or docstring in this file warning that user/system data and credentials may be transmitted externally.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This code contains user-facing strings in Chinese, including the module description and banner text, with no indication that users can choose another language or that the skill is intentionally restricted to a Chinese-speaking context. That creates a natural-language policy concern under the locale/language rule because the skill appears to impose a specific language by default.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: This JavaScript file contains multiple user-facing error strings in Chinese, such as at L05, L10, L14, and L18. Per the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified, which is not shown here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: Further user-visible validation messages at L22-L24, L50, L54, L59, and L64 are also hard-coded in Chinese. There is no indication in this file that users can choose another language or that the skill is explicitly restricted to a Chinese-speaking context.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 82% confidence
Finding: The description is primarily written in Chinese and presents the skill as oriented toward Chinese-language/Kuaishou usage, but the manifest does not state that this is an intentional region-specific constraint or offer a language choice. Under the policy, language or locale constraints should be explicit and justified rather than implicitly imposed.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 70% confidence
Finding: SQP-3 covers natural-language policy violations such as forcing a specific language without user opt-in. This README is entirely in Chinese and does not indicate that the language is optional, user-selectable, or justified as a region-specific constraint.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: This markdown file presents all operational instructions and examples in Chinese, and does not indicate that users may choose another language or that the skill is intentionally restricted to a Chinese-speaking audience. Under the policy, forcing a specific language without opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The code emits user-facing text in Chinese (创建任务重试) and similarly uses Chinese-only error text elsewhere, which imposes a specific language on users. Under the stated policy, locale-specific language should be optional or explicitly justified; this file provides no such opt-in or documented constraint.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The thrown error message 评论结果格式错误: data 不是数组类型 is natural-language output that is only available in Chinese. This creates a language policy concern because the file does not offer user opt-in, alternate locale support, or documentation justifying a Chinese-only experience.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The retry log message 查询任务重试 is a natural-language string shown to users/operators and is fixed to Chinese. Because the file does not provide language choice or explain a region-specific limitation, this is a locale policy violation under the provided criteria.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The command descriptions, usage examples, and notes shown to users are entirely in Chinese, and the skill does not offer any language selection or indicate that the locale restriction is intentional. This can violate language/locale policy when a skill forces a specific language without user opt-in.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 83% confidence
Finding: This code persists the full search output to disk via log.taskWrite(...), which is a file write operation that may store user-provided keywords and returned results. Although the CLI prints progress messages, there is no explicit disclosure in the execution flow that results will be saved locally, and the help text does not warn that searches create output files.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: Multiple error strings are hard-coded in Chinese, including credential and network failure messages. This imposes a specific language on users without opt-in or any visible language-selection mechanism, which matches the language/locale policy violation criteria.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The thrown error string 重试${maxAttempts}次后失败 is hard-coded in Chinese, which imposes a specific language in user-visible output. There is no indication in this file that the skill is China-specific or that users can opt into their preferred locale.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The file’s comments and printed user messages are entirely in Chinese, including the warning and info strings shown to users. Under the policy, forcing a specific language without user opt-in or documented justification is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: SKILL.md:15