Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
Without declared permissions the skill's intent is opaque and cannot be validated.
- Content
Security audit
Llm Workflow Diagnoser
Security checks for vulnerabilities and agentic risk
Overview
This skill is a Chinese-language workflow assessment helper, and its artifacts do not show hidden data access, persistence, or destructive behavior.
Install this if you want a Chinese-language assistant flow for deciding whether reusable offline workflows should be converted to LLM workflows. Be aware that it may answer in Chinese by default and does not explicitly declare tool permissions, though the inspected artifacts do not show sensitive access or persistence.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (7)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The file is written as a prescriptive example in Chinese and instructs that the copied report structure and formatting must remain exactly consistent. There is no indication that users may choose another language or that the Chinese-only format is required for a region-specific purpose, which creates a language/locale policy concern.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
This markdown file contains natural-language instructions entirely in Chinese and explicitly requires the pasted report structure and headings to match exactly. That effectively imposes a specific language/locale on the skill output without indicating user choice, opt-in, or a justified region-specific constraint.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The skill content is entirely written in Chinese and explicitly directs the assistant to ask follow-up questions in the user's language style, but it does not provide any user-language choice or fallback behavior. In a multilingual environment, this can cause incorrect triggering, exclusion of users who do not read Chinese, or silent workflow failure if the assistant follows the skill instead of the user's preferred language.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The markdown explicitly requires '中文正文' and instructs the model to output the six sections directly in chat, which imposes a specific language/locale choice. This is a natural-language policy concern because it does not offer the user a language choice or explain a justified region-specific constraint.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The module docstring and user-facing command labels are written only in Chinese, which indicates a fixed language/locale experience. Under the policy, locale-specific behavior should either offer user opt-in/choice or be clearly justified as region-specific; neither is present here.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
This markdown file contains natural-language instructions and examples exclusively in Chinese, and nowhere indicates that the skill is region-specific or that users may opt into another language. Under the language/locale policy check, forcing a single language without opt-in can be a policy violation.
- Content
Static analysis
No suspicious patterns detected.