global-intel-summary

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 2:42 AM UTC
• Version: 1.0.0

Overview

This skill is a Chinese-language market and news summary helper that uses public news and market-data sources without hidden persistence, credential access, or destructive behavior.

Install this only if you want a Chinese-language report generator that performs live public web, RSS, and market-data lookups. Verify important financial or geopolitical claims independently, because the package includes broad reporting instructions but only a narrow market-data helper script.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (8)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 94% confidence
• Finding: The documented behavior promises broad intelligence aggregation, alerting, correlation, and analysis, but the implementation apparently only performs narrower market-data fetching. This mismatch is dangerous because users and orchestrators may grant trust, permissions, or make decisions based on capabilities the skill claims to have but does not actually implement or validate, creating deceptive operational assumptions.

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 89% confidence
• Finding: The skill instructs the agent to perform broad network access such as fetching RSS feeds, market data, and live news, but it does not declare any explicit tool scope or allowed-tools boundary. This weakens least-privilege controls and can let the skill operate with whatever network capabilities the host agent happens to have, increasing the chance of overbroad data access or unintended outbound requests.

Natural-Language Policy Violations

Medium

• Confidence: 93% confidence
• Finding: The skill description and all operational instructions are written as mandatory Chinese-language guidance for generating reports, with no indication that users may choose another language or locale. This is a natural-language policy concern because the skill appears to enforce a specific language by default rather than offering user choice or documenting a justified region-specific constraint.

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: The config sets the output language to "zh-CN" unconditionally. This is a natural-language locale constraint, and the file does not indicate any user opt-in, language selection mechanism, or region-specific justification for requiring Chinese output.

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: The module title and description are written entirely in Chinese, and the user-facing status message is also hard-coded in Chinese. This imposes a specific language/locale without offering opt-in or documenting a justified region-specific requirement, which matches the policy violation criteria.

External Transmission

Medium

• Category: Data Exfiltration

Content

# ============= 配置 =============
CONFIG = {
    "crypto": {
        "coingecko": "https://api.coingecko.com/api/v3/simple/price?ids=bitcoin,ethereum&vs_currencies=usd&include_24hr_change=true"
    },
    "stock": {
        "yahoo_nasdaq": "https://query1.finance.yahoo.com/v8/finance/chart/^IXIC",

• Confidence: 60% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Natural-Language Policy Violations

Low

• Confidence: 94% confidence
• Finding: This markdown file is natural-language output content, and it appears to require Chinese for all headings and bullets. Under the language/locale policy rule, forcing a specific language without user opt-in can be a policy violation when no justification or choice is provided.

Natural-Language Policy Violations

Low

• Confidence: 83% confidence
• Finding: The package description is written entirely in Chinese and presents the skill as a general-purpose global intelligence summary tool, with no indication that the language restriction is optional or region-specific. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Static analysis

No suspicious patterns detected.