Security audit

分析Excel表中的申报失败信息，自动生成Word版本的申报运维报告，用于定位问题、统计趋势、提出整改建议。

Security checks for vulnerabilities and agentic risk

Overview

This skill locally turns a user-provided Excel failure log into a Word operations report, with no evidence of hidden execution, network transfer, or persistence beyond the requested output file.

Before installing or using this skill, use only approved spreadsheets and output locations, because the generated Word report may preserve operational failure details from the Excel file. Review the report before sharing it, especially if the source data contains customer, business, or incident information.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The note explicitly requires the report language to be Simplified Chinese, which is a natural-language locale constraint. Under SQP-3, forcing a specific language without user opt-in or a documented justification is a policy violation.

Missing User Warnings

Low

Confidence: 92% confidence
Finding: The skill explicitly ingests Excel files containing operational failure details and writes a generated Word report to disk, but the description does not warn that these inputs and outputs may contain sensitive business or operational data. This can lead users to provide regulated or confidential datasets without understanding the persistence and disclosure risk, especially because the output path defaults to a local file that may be shared or synced.

Static analysis

No suspicious patterns detected.