Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
该规范允许单条语音触发多个车辆控制动作，包括门锁、车窗、天窗、座椅和空调等，但文档没有要求确认步骤、风险提示、执行前条件校验或紧急中止机制。对车辆这类物理系统而言，缺少这些安全护栏会让误触发、误识别或场景误配置直接转化为现实世界的安全问题。
- Content
Security audit
语音车辆控制助手
Security checks for vulnerabilities and agentic risk
Overview
The skill is a coherent vehicle voice-control spec, but it needs Review because it enables remote physical vehicle actions and location queries without sufficiently clear safety and consent guardrails.
Review this carefully before installing or implementing it. It should be limited to trusted vehicles and authenticated users, and sensitive actions such as unlocking, engine start/stop, window/sunroof movement, seat movement, location queries, and multi-action scenarios should require explicit confirmation, vehicle-state checks, occupant safety checks, cancellation paths, and logging.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (7)
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
rest_mode会在熄火静止时调整座椅、开启空调、锁门并关闭车窗，但没有任何关于乘员在车内、逃生通道、儿童/宠物、通风与一键解锁的安全说明。此类组合动作会直接影响乘员活动空间和出入能力，在语音误识别或自动化触发下风险较高。- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
quick_cool会自动打开天窗/车窗并在延时后关闭，期间还会改变空调设定，但没有提示环境暴露、夹伤风险、降雨/异物进入或附近人员受影响等问题。自动延时执行的物理动作尤其危险，因为执行时环境可能已变化，而配置中没有再校验条件。- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
camping_mode会同时修改通风开口、座椅、灯光、空调和门锁，是典型的多执行器联动场景，但文档没有覆盖过夜通风、低电量、紧急逃生、外部安全或误上锁等关键安全要求。在车辆场景中，这种缺失会放大语音误触发或配置错误造成的人身与财产风险。- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill enables remote, safety-critical vehicle actions such as engine start/stop, door locks, windows, and scenario execution, but the description and operating guidance do not prominently warn users about physical safety, unauthorized use, or environmental hazards. In this context, omission of strong warnings and guardrails can normalize dangerous commands and increase the chance of accidental or unsafe activation, especially for remote voice-driven control.
- Content
Description-Behavior Mismatch
Medium
- Category
- Not specified by scanner
- Confidence
- 85% confidence
- Finding
技能清单描述将能力概括为车辆启停、车窗门锁、方向控制、状态查询与场景模式，但本文件定义的预设场景实际会执行导航设目的地、空调、座椅加热/放平、座椅位置调整和车内灯光控制等额外操作。虽然“场景模式”允许组合动作，但这些具体能力并未在描述中体现，导致用户对技能实际控制范围的预期偏窄。
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The protocol exposes safety-critical remote vehicle actions such as engine start/stop, door unlock, horn, lights, and precise location queries, but the document includes no warnings, policy constraints, or user-consent requirements around their use. In a voice-control skill context, this increases the risk of unauthorized or unsafe command execution, privacy violations, and physical-world harm if downstream implementers treat the protocol as sufficient guidance.
- Content
Static analysis
No suspicious patterns detected.