Security audit

madrid-trademark

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Madrid trademark assistance package with optional official-source lookup and maintenance scripts, not hidden or deceptive behavior.

Install only if you are comfortable with a legal reference skill that can guide agents to read bundled documents, run local Python calculators, and optionally use WIPO web pages through a browser. Treat outputs as legal-practice assistance, verify volatile fees/deadlines against official notices, and run the fetch/write maintenance scripts only when you intentionally want to update local reference files.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (68)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 94% confidence
Finding: The documented purpose is end-user Madrid trademark guidance, but the skill also includes content and workflows for crawling WIPO pages, parsing legal texts, and writing normalized results back into local reference files. This mismatch is dangerous because users or orchestrators may trust it as a read-only legal assistant while it actually behaves like a content-ingestion and file-modification tool, enabling unintended remote-content injection into the knowledge base or silent alteration of local materials.
Content: No source excerpt is available for this finding.

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 93)May include surrounding context.
md
· Madrid e-Filing 申请人操作指南（WIPO 官方）—— @references/madrid-efiling-applicant-guide.pdf

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 499)May include surrounding context.
md
· Madrid e-Filing 申请人操作指南（WIPO 官方）—— @references/madrid-efiling-applicant-guide.pdf

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 94)May include surrounding context.
md
· 马德里体系商品和服务分类审查指南（第五版，2026 年）—— @references/madrid-goods-services-classification-guide.pdf（配套提炼 @references/madrid-goods-services-classification.md）

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 266)May include surrounding context.
md
· 马德里体系商品和服务分类审查指南（第五版，2026 年）—— @references/madrid-goods-services-classification-guide.pdf（配套提炼 @references/madrid-goods-services-classification.md）

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-admin-instructions.md (reported line 53)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-admin-instructions.md (reported line 115)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 93)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 102)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 104)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 142)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 143)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 210)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 243)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 246)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 250)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 275)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 338)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 339)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 350)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 365)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 399)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 405)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 418)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · references/madrid-regulations.md (reported line 471)May include surrounding context.
md
表格第2条规定表格凡《实施细则》规定必须使用表格办理的程序，国际局应为之制定表‍格。第3条任选表格对于须按《实施细则》办理的除第2条所述以外的程序，国际局可以制定任选表格。

Static analysis

No suspicious patterns detected.