Back to skill

Security audit

Ai Viral Team Script Writing

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed short-video script and storyboard helper with no executable code, persistence, credential handling, or hidden system changes.

Install this if you want a Chinese-language workflow for short-video scripts and detailed Vidu-ready storyboard prompts. Review generated English prompts and any web-searched character references before approving handoff to video generation, especially if likeness or brand accuracy matters.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill entry uses broad trigger terms such as '脚本创作/分镜/编导/内容创作', which are generic enough to match many ordinary creative requests. In an agent system, overly broad routing can cause this skill to activate unexpectedly, override more appropriate tools, or induce unintended downstream actions such as web searching or handing content to video-generation components without clear user intent.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

Mandating English output without user choice creates a prompt-routing and usability safety issue because it can override the user's language expectations and cause hidden transformations of user intent. In multilingual agent workflows, forced language conversion may also degrade accuracy, lead to miscommunication in generated prompts, or cause the system to pass content to downstream tools in a form the user did not approve.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The explicit requirement that all prompts must be in English forces a language choice without opt-in and can bypass user control over how their content is represented. While not a classic security flaw, it is a genuine safety and policy concern in agentic systems because it can introduce ambiguity, mistranslation, and reduced transparency before content is sent to other components like video generation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.