Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
该文件是 markdown，适用 SQP-1。触发词同时列出“目标设定”和“帮我定目标”，其中“帮我定目标”属于自然日常表达，缺少更明确的上下文约束、限定场景或排除条件，容易在一般求助对话中被误判为调用该技能。
- Content
Security audit
Popeye Productivity
Security checks for vulnerabilities and agentic risk
Overview
This is a simple Chinese productivity prompt/template skill with no code execution or hidden data access; its main caveats are broad trigger phrases and Chinese-only content.
Install this if you want a Chinese-language personal productivity helper for planning, goals, notes, and time analysis. Be aware that generic Chinese phrases may activate it when you intended a more general assistant response, and non-Chinese users may need to explicitly ask for another language.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (7)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The trigger phrase “知识卡片” is ambiguous because it can appear in many benign contexts without clearly signaling that this specific skill should be invoked. This can lead to accidental activation or overlap with other note-taking, study, or content-generation skills, reducing reliability and potentially exposing user content to the wrong processing path.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The skill is written entirely in Chinese and instructs Chinese-only interaction without any mechanism to detect or honor the user's preferred language. This can degrade usability, cause misunderstanding of scheduling details, and lead to incorrect output when users interact in another language, but it is not inherently a high-severity security issue in this context.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The trigger phrase includes a very generic natural-language variant, '帮我规划今天', which can plausibly appear in ordinary conversation and unintentionally invoke the skill. Unintended activation can cause incorrect routing of user requests, reduce reliability, and create opportunities for prompt collisions with other skills, though this file does not expose direct code execution or data exfiltration behavior.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
This markdown skill hard-codes Chinese for the title, trigger phrases, prompt template, and example dialogue. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is explicitly documented and justified.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 82% confidence
- Finding
全文标题、触发词、模板和示例均固定为中文，未见任何允许用户选择输出语言或说明该技能仅面向特定语言用户的描述。根据规则，未获用户选择或无明确合理说明的固定语言约束属于自然语言策略问题。
- Content
Vague Triggers
Low
- Category
- Not specified by scanner
- Confidence
- 81% confidence
- Finding
The trigger phrase “知识卡片” is ambiguous because it can appear in many benign contexts without clearly signaling that this specific skill should be invoked. This can lead to accidental activation or overlap with other note-taking, study, or content-generation skills, reducing reliability and potentially exposing user content to the wrong processing path.
- Content
Static analysis
No suspicious patterns detected.