Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
Without declared permissions the skill's intent is opaque and cannot be validated.
- Content
Security audit
stock-cache-utils
Security checks for vulnerabilities and agentic risk
Overview
This is a small stock-data cache helper that only manages caller-chosen local cache files and shows no hidden or malicious behavior.
Install this only if you want a Chinese/A-share oriented cache utility. Configure the cache directory deliberately, because the helper will create, overwrite, read, and clear cache.json in that directory; also review whether the 15:30 post-market window fits your data freshness expectations.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
This code file contains natural-language documentation and runtime messages entirely in Chinese, including the module description and operational output. Under the stated policy, forcing a specific language without user opt-in is a locale-policy violation unless the constraint is explicitly justified, which is not present here.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The manifest description and main heading/body content are written in Chinese, and the file does not indicate that the skill supports other languages or that Chinese is required for a region-specific purpose. Under the policy, language constraints should be optional or clearly justified.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
L053 的注释声明 A 股交易时间为“13:00-15:00”，但 L058 实际将 afternoon_end 设为 15:30，并把这段时间纳入 is_trading_time 判定。注释描述的业务边界与真实行为不一致，会误导调用方对缓存禁用时段和“交易时间”语义的理解。
- Content