T08 · Insecure Dependencies
Warning
- Location
SKILL.md:59- Finding
Unpinned Third-Party Dependency Installation
- Content
View full analysis
- Remediation
View remediation
Security audit
Cn Ascii Art
Security checks for vulnerabilities and agentic risk
Overview
This is a small local ASCII-art helper whose behavior matches its stated purpose, with only minor documentation and dependency-installation cautions.
Install pyfiglet only from a trusted environment, preferably pinned in a virtual environment. Expect the skill's docs and CLI output to be in Chinese, and note that the website links in the README are promotional rather than required for the tool to run.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The skill metadata and all user-facing documentation are written in Chinese, including the title, feature list, usage notes, and cautions. This creates a language/locale constraint without any opt-in, alternative language option, or explanation that the skill is intended only for a Chinese-speaking audience.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
This code file contains natural-language descriptions, help text, and usage output entirely in Chinese, including the module docstring and CLI argument/help strings. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified, which it is not here.
- Content
Static analysis
No suspicious patterns detected.