Security audit

战国群雄传超越三国群英传的天花板存在可联机可对战不占内存让你开心

Security checks for vulnerabilities and agentic risk

Overview

The skill is a playable local game launcher, but its optional cross-device multiplayer adds network connections and a relay server while part of the documentation still says there is no network use.

Review before installing if you only expected an offline game. AI, hotseat, and same-browser play are local, but cross-device play requires running a WebSocket relay and entering a server URL. Only run net-server.js on a network you trust, firewall or bind it deliberately, and do not point the game at untrusted WebSocket servers.

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (10)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 93% confidence
Finding: The skill description emphasizes a self-contained offline launcher, but the documented behavior also includes a bundled WebSocket relay server and cross-device networked multiplayer. This mismatch is dangerous because users and reviewers may trust the skill as offline/local-only while it can also induce running a listening server and exchanging data over the network, expanding the attack surface and bypassing informed consent.

Description-Behavior Mismatch

Medium

Confidence: 95% confidence
Finding: The documentation explicitly says 'No server, no network' while elsewhere describing cross-device play via a WebSocket relay server. This contradiction can mislead users into opening or distributing the skill under false assumptions about its connectivity, which is especially risky because network services create exposure to remote interaction and local firewall exceptions.

Intent-Code Divergence

Medium

Confidence: 94% confidence
Finding: Conflicting inline documentation about network use undermines trust and safe review because operators may approve or execute the skill believing it is purely local. Hidden or under-disclosed network functionality is dangerous even if intended for gameplay, since it changes the threat model from offline content to a service that communicates with other peers.

Description-Behavior Mismatch

Medium

Confidence: 91% confidence
Finding: The skill metadata promises a self-contained local HTML game with zero setup, but the page includes multiplayer networking features and related UI. That capability expansion increases the attack surface and creates a trust mismatch: users and reviewers may permit local-only content that they would scrutinize differently if it can communicate with other contexts or services.

Context-Inappropriate Capability

Medium

Confidence: 95% confidence
Finding: The file opens arbitrary WebSocket connections to a configurable URL and exchanges game state and actions, despite the stated purpose being only to launch a local browser game. In a preview/workspace context, that unjustified network capability enables unintended data egress or interaction with local/internal services if a user hosts or joins a room.

Description-Behavior Mismatch

Medium

Confidence: 97% confidence
Finding: The HTML game includes full networked multiplayer logic, including state synchronization and message handling for remote peers, which exceeds the stated behavior of copying a self-contained local HTML file into preview. In a skill expected to be local-only, hidden or undocumented networking expands the attack surface by enabling external communication paths, data exchange, and behavior not implied by the manifest.

Context-Inappropriate Capability

Medium

Confidence: 98% confidence
Finding: The UI exposes optional cross-device WebSocket connectivity to an arbitrary server URL, including a default ws://127.0.0.1:8770 endpoint. For a skill described as zero-setup self-contained local gameplay, this is an unjustified capability that could be abused to initiate outbound connections, interact with local services, or mislead users about the skill’s trust boundary.

Intent-Code Divergence

Low

Confidence: 91% confidence
Finding: The tutorial text suggests multiplayer is same-device or requires a separate server component, while the page itself also contains cross-device networking capability. This mismatch is security-relevant because users may make trust decisions based on incomplete disclosure and may not realize the game can open network channels beyond local preview behavior.

Description-Behavior Mismatch

High

Confidence: 92% confidence
Finding: The file implements a standalone WebSocket relay server, which materially exceeds the stated skill purpose of copying a self-contained HTML game into the workspace and opening it locally. Introducing undocumented network service behavior expands the attack surface, can enable unreviewed inter-process or remote communication, and creates persistence/capability beyond what a user would reasonably expect from a simple local game launcher.

Context-Inappropriate Capability

Medium

Confidence: 88% confidence
Finding: This code provides socket-based multiplayer relay functionality without justification in the advertised scope of merely launching a browser game. Even if the relay is simple, hidden networking features can be abused for unintended message passing, expose local services, and violate least-privilege expectations for a skill that users may assume is offline and self-contained.

Static analysis

No suspicious patterns detected.