Security audit

Live Shopping Notes

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to be a straightforward livestream shopping note tool that stores user-entered shopping notes locally for later summaries.

Install this if you are comfortable with a livestream shopping notes tool saving product notes, links, prices, and preferences locally for later review. Avoid entering sensitive personal or financial information unless you know how the host environment manages LocalStore retention and deletion.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Natural-Language Policy Violations

Medium

Confidence: 90% confidence
Finding: The file title and multiple user-facing strings are presented only in Chinese, and the example interaction text also assumes Chinese input. This creates a natural-language locale constraint without any indication that users can choose another language or that the skill is intentionally limited to a specific region or audience.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The skill persistently stores livestream session notes, item details, links, and preferences via LocalStore without any visible consent, retention control, or disclosure to the user. Because shopping notes can reveal behavioral preferences, purchase intent, and possibly sensitive free-text notes, silent persistence creates a privacy risk if the data is later accessed by other components or retained longer than expected.

Natural-Language Policy Violations

Low

Confidence: 83% confidence
Finding: The file presents core invocation examples and most user-facing instructions in Chinese, but does not indicate that users may choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the policy, forcing or assuming a specific language without opt-in can be a natural-language policy issue.

Static analysis

No suspicious patterns detected.