T08 · Insecure Dependencies
Note
- Location
SKILL.md:17- Finding
Unnecessary Unpinned Third-Party Dependency Installation
- Content
View full analysis
- Remediation
View remediation
Security audit
Cn Resume Analyzer
Security checks for vulnerabilities and agentic risk
Overview
This skill is a simple Chinese resume review helper with some privacy and dependency cautions, but no evidence of hidden, destructive, or unrelated behavior.
Install only if you are comfortable using a Chinese-focused resume checker. Prefer pasted resume text over file paths or URLs unless you intend the agent to read or fetch that document, and avoid installing optional unpinned dependencies unless remote resume retrieval is actually needed.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)
T09 · Insecure Skill Coding Practices
Note
- Location
scripts/resume_analyzer.py:104- Finding
Malformed Short-Input Handling Causes an Unhandled CLI Exception
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The skill description, invocation guidance, and handler instructions are written entirely in Chinese and present the skill as a Chinese resume-analysis tool, but there is no statement that the locale is intentionally limited or that users may choose another language. This creates a natural-language policy issue because the skill appears to enforce a specific language by default without opt-in.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The trigger phrases and scope are broad enough to activate on common resume-help requests without clear constraints or confirmation. In practice, this can cause unintended invocation of the skill and unnecessary processing of sensitive resume data, especially because resumes often contain personal identifiers, employment history, and contact information.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The workflow explicitly allows obtaining resume content from file paths or URLs, but the skill description does not warn users about the privacy and security implications. This is risky because resumes are highly sensitive documents, and fetching from local paths or remote URLs can expose personal data, trigger unintended local file access, or retrieve data from untrusted sources.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The natural-language interface, docstrings, error messages, and printed output are all written in Chinese, and the analysis rules are tailored to Chinese resume conventions and keywords. There is no indication that users can choose another language or that the locale restriction is explicitly documented as a justified region-specific constraint.
- Content