Security audit

Functional PRD Writer

Security checks for vulnerabilities and agentic risk

Overview

This skill is a plain Markdown guide for writing functional PRDs and does not request execution, credentials, persistence, or external data access.

Install this if you want a Chinese-first functional PRD writing assistant. Users who prefer English should explicitly request English output, but there is no evidence of hidden code execution, data access, or persistence in the inspected artifacts.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Natural-Language Policy Violations

Medium

Confidence: 97% confidence
Finding: The guideline says "用中文撰写，除非用户指定英文," which forces a specific language as the default behavior unless the user overrides it. This is a natural-language policy concern because the skill does not first offer a language choice or require explicit opt-in to the locale preference.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The entire reference document is written as a mandatory Chinese template and checklist, with no indication that users may choose another language or that the skill is intentionally restricted to a Chinese-only context. This is a natural-language policy concern because it imposes a specific language by default rather than offering opt-in or documenting a justified regional scope.

Vague Triggers

Low

Confidence: 87% confidence
Finding: The manifest description says the skill will 'Write concise, implementation-oriented functional PRDs for feature development' but does not define when it should activate, what requests it should respond to, or any exclusion conditions. In a manifest file, this lack of specificity can create an overly broad invocation scope for common product-writing requests.

Natural-Language Policy Violations

Low

Confidence: 88% confidence
Finding: This markdown file contains natural-language instructions and labels exclusively in Chinese, from the title through all section content. Under the language/locale policy, forcing a specific language without user opt-in or a documented justification is a policy concern.

Static analysis

No suspicious patterns detected.