limtdesign

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 4:10 AM UTC
• Version: 1.0.0

Overview

This is a Chinese-language visual prompt-writing skill with no executable code, persistence, credential handling, or hidden system changes.

Installers should expect Chinese-language visual prompt guidance and should review prompts before sending uploaded product, model, or reference images to downstream image-generation systems.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (17)

Vague Triggers

High

• Confidence: 97% confidence
• Finding: The skill’s activation rule is extremely broad: it mandates use whenever users mention common terms like image generation, drawing, prompts, creative design, or visual plans, including vague requests such as 'help me make a poster.' This can cause unintended invocation over more appropriate skills or core handling, increasing the chance of incorrect routing, policy bypass through misclassification, and over-collection or propagation of user intent into downstream prompt-generation flows.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: The entire skill specification is written as a mandatory Chinese-language instruction set for generating ecommerce prompts and text, with no indication that users may choose another language or locale. This creates a natural-language locale policy issue because the skill effectively constrains output language without documenting user choice or a justified regional-only limitation.

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: This markdown file contains all user-facing guidance in Chinese and does not indicate that users may choose another language or that the skill is intended only for a Chinese-speaking or region-specific context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: This markdown file contains user-facing instructions exclusively in Chinese, and there is no indication that users may choose another language or that the skill is intentionally restricted to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Natural-Language Policy Violations

Medium

• Confidence: 93% confidence
• Finding: This markdown skill file presents all instructions and guidance exclusively in Chinese, and there is no natural-language indication that users may choose another language or that the skill is restricted to a Chinese-speaking context. Under the policy rule for language or locale constraints, forcing a specific language without user opt-in is a reportable issue.

Natural-Language Policy Violations

Medium

• Confidence: 91% confidence
• Finding: The entire skill file is written in Chinese and presents all instructions in that language, with no indication that users may choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the policy, a fixed language requirement without user opt-in or documented justification is a natural-language policy concern.

Natural-Language Policy Violations

Medium

• Confidence: 90% confidence
• Finding: This markdown file presents all instructions and guidance exclusively in Chinese, and there is no natural-language indication that users may choose another language or that the skill is intended only for a Chinese-language audience. Under the policy, forcing a specific language without user opt-in is a locale/language policy concern.

Natural-Language Policy Violations

Medium

• Confidence: 94% confidence
• Finding: This markdown file contains all user-facing instructions in Chinese and does not mention any user opt-in, alternative language support, or a region-specific justification. Under the policy rule, forcing a specific language without user choice is a natural-language policy violation.

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: This markdown file presents all instructions and guidance exclusively in Chinese, and there is no natural-language indication that users may choose another language or that the skill is intended only for a Chinese-language audience. Under the policy criteria, forcing a specific language without user opt-in is a locale/language policy violation.

Natural-Language Policy Violations

Medium

• Confidence: 90% confidence
• Finding: The entire skill file is written as a Chinese-only scene specification and does not indicate that users may choose another language or locale. Under the policy rule, forcing a specific language without opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.

Natural-Language Policy Violations

Medium

• Confidence: 87% confidence
• Finding: This markdown file presents all guidance exclusively in Chinese and does not indicate that users can choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.

Natural-Language Policy Violations

Medium

• Confidence: 89% confidence
• Finding: The file content is entirely written as a Chinese-only skill specification and does not provide any mechanism to preserve or negotiate the user's preferred language. This can cause the agent to respond in Chinese even when the user requested another language, reducing user control and potentially causing misunderstanding in safety-critical or transactional contexts.

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: The file is entirely written in Chinese and strongly constrains the skill to a Chinese-language WeChat Official Account context without indicating that the user's preferred language should be honored. In a general-purpose agent skill, forcing a locale can cause the assistant to ignore user language preferences, degrade usability, and create unsafe misunderstandings if prompts or design requirements are generated in an unintended language.

Natural-Language Policy Violations

Medium

• Confidence: 89% confidence
• Finding: The file is entirely framed as a Chinese-specific skill ('小红书视觉场景') and all user-facing guidance is written to produce Xiaohongshu-native Chinese copy patterns, but it does not state that the language/locale behavior is optional or user-selected. Under the language/locale policy, forcing a specific language without opt-in is a natural-language policy concern.

Natural-Language Policy Violations

Low

• Confidence: 97% confidence
• Finding: This markdown file consists wholly of Chinese-language instructions and descriptions, with no indication that users may choose another language or locale. That can violate a language/locale policy when a skill effectively forces one language without explicit user opt-in or documented regional justification.

Intent-Code Divergence

Low

• Confidence: 85% confidence
• Finding: The file documents a concept-art and illustration scene, but L180 instructs using a character reference image via the tag "图生图：商品图". That label denotes a different intent category than the surrounding documentation and can misroute or misrepresent how the reference should be used.

Natural-Language Policy Violations

Low

• Confidence: 93% confidence
• Finding: This markdown file presents all instructions and examples exclusively in Chinese, which can amount to a language-policy constraint if users are not given an explicit choice of language. The policy for this audit requires flagging skills that force a specific language without user opt-in unless the locale limitation is clearly documented and justified.

Static analysis

No suspicious patterns detected.