Back to skill

Security audit

Trademark Quick Check

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Chinese-language trademark pre-check assistant with a local scoring helper and public trademark lookup guidance, with no evidence of hidden access, persistence, or destructive behavior.

Install this if you want Chinese-language trademark pre-check assistance and are comfortable with the agent using public trademark websites or search engines for current results. Treat outputs as preliminary business/legal guidance and verify important trademark decisions through official databases or a qualified trademark professional.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Tp4

High
Category
MCP Tool Poisoning
Confidence
86% confidence
Finding

代码与描述存在部分相关性:确实实现了近似商标分析、一定程度的风险评估,以及图形商标维也纳分类辅助,这些都属于商标预查范畴。但声明中的多个核心能力没有在代码中体现,尤其是“商标查询/检索”“申请流程导航”“尼斯分类推荐/商品服务类别推荐”。代码没有访问任何商标数据库、外部查询接口或分类推荐逻辑,因此无法支撑“商标查询”“查重”“流程导航”等较强表述。另有一点偏差是代码实现的是维也纳图形分类,而声明强调的是尼斯分类推荐,这两者不是同一能力。综合看,代码是商标预查的一个子模块,而非完整符合声明的工具,因此应判定为描述与实际行为不完全一致,存在实质性能力缺失型不匹配。

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The file consistently presents the skill's description, workflow, prompts, and required outputs only in Chinese. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly documented and justified, which is not done here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The module docstring, user-facing warnings, CLI usage examples, and all runtime error/report strings are written exclusively in Chinese, indicating the skill is designed to communicate only in that language. Under the language/locale policy, this is a natural-language constraint that should either be optional or explicitly justified.

Content

No source excerpt is available for this finding.