Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
Without declared permissions the skill's intent is opaque and cannot be validated.
- Content
Security audit
China Shopping
Security checks for vulnerabilities and agentic risk
Overview
This is a local China-shopping recommendation helper with Chinese-language output and no evidence of credential access, persistence, or network execution.
Install this if you want offline, category-based suggestions for Chinese shopping platforms. Do not rely on it for current prices, seller verification, availability, or safety of a specific listing, because it only uses bundled static data.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (9)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The description lists very broad activation conditions such as 'where to shop for electronics, clothing, groceries, beauty products, or similar items' and generic phrases like '中国购物推荐'. This can overlap with ordinary conversation and does not provide negative examples or clear exclusions for when the skill should not activate.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The module docstring presents the skill solely in Chinese, and the tool's purpose is framed around recommending Chinese shopping sites. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale constraint is clearly documented and justified.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
User-facing descriptions, errors, and examples are emitted in Chinese throughout the CLI flow. This effectively enforces a specific language for interaction without presenting a language choice or clearly stating that the tool is restricted to Chinese-language users for a justified regional purpose.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 86% confidence
- Finding
Line L03 instructs the skill to recommend specifically Chinese shopping platforms, which imposes a locale-specific behavior in natural-language guidance. The file does not indicate user opt-in, alternative locales, or a documented justification that this skill is intentionally region-specific.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
Line L06 instructs the skill to 'List the most suitable 2-4 Chinese shopping platforms,' which imposes a specific geographic/locale constraint in natural language. Because the file does not offer user opt-in or explain that this skill is intentionally region-specific, it appears to force a locale-specific output pattern.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
This JSON content hard-codes category names, descriptions, reasons, and shopping tips in Chinese across the dataset. Because the file provides no indication of user language selection or a documented region-specific justification, it may enforce a specific language/locale without user opt-in.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 79% confidence
- Finding
This JSON content presents all user-facing natural-language fields in Chinese only, with no indication that the skill supports other languages or lets the user opt in to a locale-specific experience. Under the policy rule, forcing a specific language without user choice can be a natural-language policy violation unless the locale restriction is documented and justified.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 83% confidence
- Finding
This JSON file contains only Chinese product keywords as accepted inputs, which implies a fixed language/locale constraint. Under the policy, locale-specific behavior should either offer user choice or be clearly documented as justified for a region-specific use case, neither of which is present in this file.
- Content
Static analysis
No suspicious patterns detected.