Back to skill

Security audit

Ai Report Generator

Security checks for vulnerabilities and agentic risk

Overview

This skill reads a Feishu table to create a Xiaohongshu operations report, and its behavior is disclosed and proportionate to that purpose.

Before installing, confirm the Feishu app only has read access to the specific Bitable and columns needed for Xiaohongshu reporting. Expect Chinese report output unless you ask the agent to adapt the language.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The description is written as a fixed Chinese-language task description, and the sample output/report structure is entirely in Chinese, with no indication that users may choose another language. This can violate language/locale policy when a skill imposes a specific language without opt-in or documented regional justification.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill explicitly reads data from a Feishu Bitable but does not clearly warn the user in the skill description that external data will be accessed. This weakens informed consent and can surprise users about data access scope, especially if the table contains sensitive business metrics.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.