Security audit

校验XML数电票

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local XML invoice validation guide with no hidden access or persistence, but its sample validator is incomplete and should not be treated as authoritative compliance proof.

Use this as a quick local screening helper, not as the sole basis for tax, accounting, or compliance decisions. If correctness matters, prefer an official schema/XSD or a validated parser and add checks for all required invoice sections before trusting a pass result.

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Intent-Code Divergence

Medium

Confidence: 82% confidence
Finding: The skill claims to validate a broad set of required invoice structures and fields, but the code only checks a small subset. In a workflow that relies on this validator for compliance or trust decisions, malformed or non-conforming XML could be incorrectly accepted, enabling validation bypass and downstream processing of untrusted invoice data.

Static analysis

No suspicious patterns detected.