Security audit
MochiLab 文件阅读与重点问答 · Document Reading and Questions
Security checks for vulnerabilities and agentic risk
Overview
The skill reads selected workspace documents as described, and inspection did not substantiate the scanner’s security concerns.
Use it with documents you authorize your assistant to read. Document passages may be processed by your assistant’s configured model provider. The helper needs workspace write access for its temporary lock, although it leaves source documents unchanged.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Static analysis
No suspicious patterns detected.