Lp1
High
- Category
- MCP Least Privilege
- Confidence
- 75% confidence
- Finding
The skill uses 'network' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.
- Content
Security audit
中国天气预报查询 (China Weather)
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward China weather lookup tool with disclosed network use and no evidence of persistence, credential access, exfiltration, or destructive behavior.
Before installing, be aware that this skill runs a Python script with exec and makes live HTTPS requests to China Weather services. It is suitable for China-focused weather queries, but users who want stricter permission declarations or configurable language behavior may want those clarified by the publisher.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The description and examples present the skill as Chinese-only (e.g. "中国天气预报查询") and all suggested user prompts are in Chinese, but the file does not state that this locale restriction is optional or region-justified as an organizational policy exception. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The invocation guidance includes common conversational phrases like "今天天气怎么样", "明天会下雨吗", "出门需要带伞吗", and "穿什么衣服合适", which can occur in normal chat and are not clearly bounded to explicit skill invocation contexts. The file does not provide exclusion conditions or negative examples to distinguish when the skill should not trigger.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The request header hard-codes
Accept-Languageto preferzh-CN, which imposes a specific language/locale behavior. The file does not offer a user opt-in or configuration mechanism for locale selection, nor does it document a justified region-specific constraint.- Content