Driver's License Exam - 驾考题库

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 4:38 AM UTC
• Version: 1.0.2

Overview

This skill is a straightforward driving-exam question helper that uses a JisuAPI key to fetch practice questions from JisuAPI.

Install only if you are comfortable using JisuAPI for driving-exam practice questions. Set JISU_API_KEY as an environment variable, avoid putting personal or sensitive information into request fields, and be aware that exam query parameters and the API key are sent to JisuAPI.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (5)

Tp2

High

• Category: MCP Tool Poisoning
• Confidence: 85% confidence

Finding

Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 93% confidence

Finding

The skill declares access to environment variables and relies on a third-party API, but does not define an explicit tool/permission scope. That weakens least-privilege guarantees and can cause the agent runtime or reviewers to underestimate that the skill reads secrets and performs outbound network requests.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The activation guidance uses catch-all wording equivalent to 'or similar driving-exam practice,' which can trigger the skill on loosely related prompts. Overbroad routing can cause unintended third-party API calls and disclosure of user-supplied parameters to the provider when the user did not clearly request this skill.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The documentation explains how to configure an API key and send request parameters to JisuAPI, but it does not warn that user inputs are transmitted to an external service. This creates a transparency and privacy risk because users or integrators may unknowingly send potentially sensitive learning preferences or prompt content to a third party.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · driverexam.py (reported line 14)May include surrounding context.

python

import requests


DRIVEREXAM_QUERY_URL = "https://api.jisuapi.com/driverexam/query"


def query_driverexam(appkey: str, req: dict):

Static analysis

No suspicious patterns detected.