Back to skill

Security audit

Short Play Writer(短剧剧本创作大师)

Security checks for vulnerabilities and agentic risk

Overview

This is a prompt-only Chinese short-drama writing skill with no code execution, network access, persistence, or sensitive data handling.

Install this if you want Chinese-language short-drama or AI comic scripting templates. Be aware that its examples and guidance are almost entirely Chinese and tuned for viral short-video drama formats; users wanting other languages or less formulaic writing may need to ask explicitly.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (14)

Vague Triggers

High
Category
Not specified by scanner
Confidence
97% confidence
Finding

The skill declares that it should auto-trigger not only for explicit requests about short plays or comics, but for any content that merely resembles related formats or pacing. This broad, ambiguous trigger scope can cause the agent to invoke the skill for loosely related writing tasks, overriding user intent and increasing the chance of irrelevant or manipulative behavior.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

The changelog text and referenced formatting guide are presented entirely in Chinese, which imposes a specific language/locale in natural-language content. There is no indication that this skill is region-specific or that users can opt into another language, which can violate language/locale policy requirements.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The skill metadata and instructions strongly brand the skill in Chinese and position it around Chinese-language content without indicating that language choice should follow the user's preference. In a multi-language assistant, this can lead to unwanted language switching or culturally scoped output that degrades usability and may mis-handle user requests.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file presents all headings and instructional content exclusively in Chinese, and does not indicate that the user can choose another language or locale. Under the policy, forcing a specific language without user opt-in is a reportable natural-language violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The entire markdown file is written as a fixed Chinese template set and does not indicate that users may choose another language or locale. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all instructions and content exclusively in Chinese, with no opt-in, alternative language, or explanation that the skill is intentionally region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

SQP-3 applies to all file types and includes language or locale policy violations. This markdown file presents all instructions and content only in Chinese, and there is no indication that the user can opt into another language or that the skill is intentionally limited to a Chinese-only regional context.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file is entirely presented as a Chinese-only short-drama example, and the title explicitly frames it as a '女频短剧示例' without any indication that other languages are supported. Under the policy rule, forcing a specific language or locale without user opt-in is a natural-language policy violation unless the regional constraint is clearly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
81% confidence
Finding

SQP-3 applies to all file types and covers natural-language policy violations such as forcing a specific language without user opt-in. This markdown file presents all instructions and content solely in Chinese and does not indicate that the language is optional, user-selected, or justified by a region-specific scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The entire document is written only in Chinese and provides no indication that users may choose another language or locale. Under the stated policy, a skill that effectively requires a specific language without opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The markdown content presents the skill material exclusively in Chinese, and there is no indication that users may choose another language or that the file is intentionally limited to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

This markdown skill content appears to require Chinese comprehension throughout, and no alternative language option or user opt-in is mentioned anywhere in the file. Under the policy rule for language/locale constraints, forcing a specific language without opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The natural-language comments state the skill description entirely in Chinese and indicate the skill is prompt-driven within a specific framework, but they do not offer any language choice or explain a justified locale restriction. This can reflect a language policy constraint without user opt-in, which falls under the language/locale policy check.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

This markdown file presents all skill content in a single language and does not provide user opt-in, alternative language support, or a documented reason for the language restriction. Under the stated policy, forcing a specific language without user choice can constitute a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.