EcoLink 批量碳足迹搜索

• Outcome: Review
• Latest audit: Sep 16, 2026 · 9:52 AM UTC
• Version: 1.0.2

Overview

The skill is mostly a local carbon-footprint search tool, but it includes under-disclosed remote LLM credential handling and unsafe export/preview paths that users should review before installing.

Install only if you are comfortable with the review items: use the documented --no-llm mode unless you explicitly intend to send queries to a remote LLM provider, avoid passing valuable API keys on the command line, and treat generated HTML/CSV/Excel outputs as untrusted when product names or input files came from another party.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (3)

T09 · Insecure Skill Coding Practices

Error

• Location: scripts/batch_search.py:326

Finding

Configurable LLM endpoint can receive sensitive queries and bearer credentials

Content

View full analysis

Remediation

View remediation

T09 · Insecure Skill Coding Practices

Error

• Location: scripts/batch_search.py:748

Finding

Stored script injection in generated HTML preview

Content

View full analysis

``` ```html ` terminates the script element even when it appears inside a JavaScript string. A crafted product name can therefore close the legitimate script block and inject a new HTML or JavaScript element. For example, an attacker-controlled input can conceptually contain: ```text ``` The later `esc` function does not mitigate this issue because it runs only after the browser has already parsed and executed the outer script. It also does not protect the raw `term` interpolation in the group header and inline `onchange` attribut ...[truncated 1570 chars]

Remediation

View remediation

``` Assign its contents through a safe HTML-generation mechanism and read it using `textContent` before calling `JSON.parse`. 3. If server-side embedding remains necessary, escape at least `<`, `>`, `&`, U+2028, and U+2029 in serialized JSON. In particular, encode `<` as `\u003c` so `` cannot terminate the element. 4. Replace string-based `innerHTML` construction with DOM APIs such as `createElement`, `append`, and `textContent`. 5. Remove inline event handlers. Register handlers through `addEventListener` and retain search terms in JavaScript data structures rather than quoted HTML attributes. 6. Apply context-specific encoding separately for HTML text, HTML attributes, JavaScript strings, and URLs. 7. Add a restrictive Content Security Policy that blocks inline scripts and limits network destinations. This should be defense in depth, not a substitute for output encoding. 8. Add regression tests using payloads containing script terminators, quotes, apostrophes, angle brackets, ampersands, and Unicode line separators. ]]>

T09 · Insecure Skill Coding Practices

Error

• Location: scripts/batch_search.py:942

Finding

CSV and Excel formula injection through untrusted result values

Content

View full analysis

{ csv += COLUMNS.map(col => { let v = (row[col] || '').toString().replace(/"/g, '""'); return '"' + v + '"'; }).join(',') + '\n'; }); ``` ### Technical Analysis Spreadsheet applications may interpret cells beginning with formula-significant characters such as `=`, `+`, `-`, or `@` as formulas. CSV quoting does not prevent this interpretation. The Python CSV writer, openpyxl output path, and browser exporter all preserve these prefixes without neutralization. Several exported fields can ultimately contain user-controlled input, including the original search term. Other fields may originate from imported files or remotely generated LLM output. Consequently, an attacker who controls an input product name can cause a formula to be stored in the exported file. The exploit activates when the generated CSV or workbook is opened in a spreadsheet application that evaluates the formula. ### Attack Path 1. An attacker supplies a product name beginning with a spreadsheet formula marker, for example a value beginning with `=`. 2. The victim imp ...[truncated 1332 chars]

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (41)

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 239)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 242)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7833)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7834)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7835)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7836)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7837)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7838)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7839)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7840)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7841)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7842)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7843)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7844)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7845)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7846)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7847)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 7848)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 12076)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Harmful Content Injection

Critical

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

This content may contain harmful instructions that could cause physical harm if followed. CRITICAL: Review carefully before use.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 12077)May include surrounding context.

text

acrylic filler production,acrylic filler,RER,2000 - 2025,Chemicals,kg,
acrylic filler production,acrylic filler,RoW,2000 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RER,1995 - 2025,Chemicals,kg,
"acrylic varnish production, with water, in 53% solution state","acrylic varnish, with water, in 53% solution state",RoW,1995 - 2025,Chemicals,kg,
"acrylonitrile production, Sohio process",acetonitrile,RER,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RER,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RER,1989 - 2025,Chemicals,kg,107-13-1
"acrylonitrile production, Sohio process",acetonitrile,RoW,1989 - 2025,Chemicals,kg,75-05-8
"acrylonitrile production, Sohio process",hydrogen cyanide,RoW,1989 - 2025,Chemicals,kg,74-90-8
"acrylonitrile production, Sohio process",acrylonitrile,RoW,1989 - 2025,Chemicals,kg,107-13-1
acrylonitrile-butadiene-styrene copolymer production,acrylonitrile-butadiene-styrene copolymer,RER,1996 - 2025,Chemicals,kg,009003-56-9

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 95% confidence

Finding

The skill documentation promises a constrained local bulk-search workflow, but the static finding indicates behavior outside that contract, including reading source Excel workbooks and performing conversion/preprocessing instead of the described search flow. Description-behavior mismatches are dangerous because users and platform policy may authorize a skill based on its stated purpose while hidden or undocumented operations touch additional files or bypass expected review points.

Content

No source excerpt is available for this finding.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 24)May include surrounding context.

md

| ecoinvent v3.12 | `data/ecoinvent.csv` | ~26,500 | Cut-Off AO，列: activity_name, product_name, geography, time_period, sector, unit, cas_number |

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 25)May include surrounding context.

md

| CPCD 产品碳足迹 | `data/cpcd.csv` | ~4,875 | 列: product_name, product_name_en, model, cf_value, cf_unit, quality_score, data_year, functional_unit |

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · data/cpcd.csv (reported line 1)May include surrounding context.

text

category_path,emission_type,fuel_type,factor_value,unit_cn,source
农、林、牧、渔业 > 畜禽养殖企业 > 燃料燃烧 > 化石燃料燃烧 > 煤炭 > 二氧化碳,二氧化碳,无烟煤,98.3,因子  (tCO₂/TJ),"数据来源于《2006年IPCC清单指南》
"
农、林、牧、渔业 > 畜禽养殖企业 > 燃料燃烧 > 化石燃料燃烧 > 煤炭 > 二氧化碳,二氧化碳,炼焦烟煤,94.6,因子  (tCO₂/TJ),数据来源于《2006年IPCC清单指南》

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · data/ecoinvent.csv (reported line 1)May include surrounding context.

text

category_path,emission_type,fuel_type,factor_value,unit_cn,source
农、林、牧、渔业 > 畜禽养殖企业 > 燃料燃烧 > 化石燃料燃烧 > 煤炭 > 二氧化碳,二氧化碳,无烟煤,98.3,因子  (tCO₂/TJ),"数据来源于《2006年IPCC清单指南》
"
农、林、牧、渔业 > 畜禽养殖企业 > 燃料燃烧 > 化石燃料燃烧 > 煤炭 > 二氧化碳,二氧化碳,炼焦烟煤,94.6,因子  (tCO₂/TJ),数据来源于《2006年IPCC清单指南》