Back to skill

Security audit

Learning Cards (Spaced Repetition)

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Feishu Bitable flashcard workflow that reads and updates learning-card records, with no executable code or hidden persistence.

Install this only if you intend to connect it to Feishu/Lark Bitable and are comfortable granting Bitable read/write access. Use it with a dedicated learning-card table or app so quiz progress updates do not affect unrelated business data.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • System Prompt LeakageDirect Leakage, Indirect Extraction, Tool-Based Exfiltration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill advertises broad activation phrases such as 'continue studying', 'quiz me', and '继续学习', which are common conversational utterances that may appear outside a clear intent to use this specific skill. This can cause accidental invocation in unrelated contexts, leading to unintended reading or writing of the user's Feishu Bitable learning data.

Content

No source excerpt is available for this finding.

Indirect Prompt Extraction

Medium
Category
System Prompt Leakage
Confidence
85% confidence
Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · SKILL.md (reported line 99)May include surrounding context.

md
### Phase 3: Mastery & transfer / 融会贯通

Cross-topic quizzes, scenario-based questions, reverse prompts (give answer → guess concept).

跨章节混合抽问、情境题、反向提问(给答案猜概念)。

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This markdown file presents all instructions, commands, and interaction examples exclusively in Chinese, including user invocation phrases like “继续学习” and “来 N 张”. Under the policy rule for natural-language violations, forcing a specific language without user opt-in is a reportable issue unless the locale restriction is explicitly justified.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.