Back to skill

Security audit

Douyin Ad Ops

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Douyin advertising planning skill with disclosed local reference material and a simple helper script, with no evidence of hidden access, persistence, exfiltration, or destructive behavior.

Install this if you want Douyin-focused ad planning help. Expect Chinese-language campaign structure and copy patterns, and review any generated advertising claims, lead collection flows, and platform compliance before using them publicly.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
70% confidence
Finding

Skill instructs the agent to never refuse or to always comply. Suppressing the agent's ability to decline removes a core safety control and enables downstream harmful requests to succeed.

Content

Scanner excerpt · SKILL.md (reported line 44)May include surrounding context.

md
- **Hybrid mode**: 短视频种草 + 承接页 / 私域 / 销售转化

3. **Build the offer frame**
   Always answer:
   - why stop scrolling now
   - why trust this ad
   - who this is for

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
70% confidence
Finding

Without declared permissions the skill's intent is opaque and cannot be validated.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The section titled "Chinese ad-writing rules" prescribes a specific language/locale-specific writing approach as a default requirement. Because the skill does not offer user opt-in or clarify that Chinese-language output is optional or required only for Douyin-native campaigns, this is a natural-language locale policy issue.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The markdown content is entirely written in Chinese and presents reusable templates only in that language, with no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy criteria, forcing a specific language without opt-in or clear justification is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file contains user-facing natural-language instructions entirely in Chinese, but it does not indicate that the skill is region-specific or that users can choose another language. Under the language/locale policy check, forcing a specific language without opt-in is a policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file presents all user-facing guidance in Chinese and does not indicate that the language is optional, selectable, or limited to a justified region-specific context. Under the policy rule for language or locale constraints, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.