Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed eNSP topology-file generator and its file creation behavior fits that purpose.
Installers should expect this skill to create `.topo` files in the current workspace for eNSP use. Review filenames before generation if overwriting existing topology files would matter.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<?xml version="1.0" encoding="UNICODE" ?>
<topo version="1.3.00.100">
<devices>
<!-- Device definitions -->
</devices>
<lines>
<!-- Connection lines -->
The activation rule says to always use this skill when the user asks to create, generate, or design a network topology diagram, which is broader than the specific eNSP/Huawei simulator scope. That can cause the agent to invoke this skill for generic network-design requests and produce simulator-specific files or behaviors the user did not ask for, leading to inappropriate tool use and unintended file generation.
The skill instructs writing a generated topology file to the current directory as a default action, without requiring user confirmation or clarifying that it will modify the local filesystem. In an agent environment, implicit file creation can surprise users, overwrite existing files, or be abused through crafted filenames/paths if downstream handling is not constrained.
Line L538 states charset | 1=UTF-8/ASCII, 134=GBK/Chinese, which embeds a locale-specific language encoding recommendation in the natural-language documentation. Because the document does not offer user opt-in or explain that the skill is region-specific, this can be read as a language/locale policy constraint.