Tp2
High
- Category
- MCP Tool Poisoning
- Confidence
- 85% confidence
- Finding
Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.
- Content
Security audit
Cn Ppt Outline
Security checks for vulnerabilities and agentic risk
Overview
This skill coherently generates Chinese PPT outlines and optional presentation files, with no evidence of hidden network, credential, persistence, or destructive behavior.
Install only if a Chinese-language PPT outline generator fits your workflow. When exporting files, provide an output path in your workspace and avoid names that could overwrite important files.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 78% confidence
- Finding
The skill advertises file-generation capability ('直接生成.pptx文件' and example output paths) but does not declare any explicit tool scope such as allowed file-write permissions. This creates a trust and containment gap: an agent or runner may permit broader filesystem writes than users expect, increasing the risk of unintended overwrites or writing sensitive locations if the implementation is unsafe.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The skill name, headings, usage examples, and output examples are entirely presented in Chinese, with no indication that users can choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the policy criteria, imposing a specific language without opt-in or clear justification is a natural-language policy violation.
- Content