Security audit

qa-mobile-testing

Security checks for vulnerabilities and agentic risk

Overview

This is a mobile QA checklist skill with some off-scope reference material and an optional unpinned install command, but no hidden execution, data theft, persistence, or destructive behavior was found.

Install this only if you want primarily Chinese-language mobile QA guidance. Review the optional `npx` command before running it, preferably pinning or verifying the package source, and be aware that some bundled reference files cover desktop/PC Web or SEO topics that are outside the core mobile testing scope.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (12)

Description-Behavior Mismatch

High

Category: Not specified by scanner
Confidence: 99% confidence
Finding: The file contains PC Web testing guidance inside a skill explicitly scoped for mobile QA. This creates a scope-confusion vulnerability: an agent selecting this skill may return irrelevant desktop-web checklists instead of mobile-specific interruption, network, permission, and device-compatibility tests, causing important mobile risk areas to be omitted. In the skill context, this is more dangerous because the skill is meant for release-oriented QA coverage, where missing mobile-only failure modes can directly reduce test effectiveness.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The description and when-to-use fields list generic triggers such as "App测试", "Android测试", "iOS测试", and "需要测试移动应用", which are broad enough to match many ordinary user requests without clearly delimiting when this skill should or should not activate. The file does not provide negative examples or exclusion conditions to narrow invocation scope.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 92% confidence
Finding: The skill recommends installation via npx skills add Kokxi/qa-test-skills without pinning an exact package version. This can cause users to fetch whatever version is current at execution time, increasing supply-chain risk if a newer malicious or compromised release is published or if dependency resolution changes unexpectedly.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The manifest says this skill is for mobile-specific testing of iOS/Android apps, H5 pages, and mini programs, with emphasis on interruptions, network changes, permissions, compatibility, and performance. This file instead provides a desktop-testing checklist focused on window management, system tray, multi-monitor behavior, and desktop file operations, which does not match the declared mobile-testing scope.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file uses only Chinese for its title, section headings, and checklist items, which can constitute a language/locale policy violation when no user opt-in or justification is provided. The file does not indicate that it is intended only for a Chinese-speaking audience or a China-specific compliance context.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The file introduces test domains such as window management, system tray behavior, global shortcut handling, and multi-display workflows that are characteristic of desktop applications rather than mobile apps or mini programs. These capabilities are not justified by the skill’s stated purpose, which is narrowly framed around mobile-end special scenarios.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: This markdown file contains all instructions and checklists only in Chinese, which can amount to forcing a specific language on users without opt-in. The policy explicitly flags language or locale constraints unless the skill offers a choice or clearly documents a justified regional scope.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown file presents all guidance, headings, and checklists exclusively in Chinese, with no indication that the skill is intended only for a Chinese-speaking audience or that users can opt into this locale. Under the policy, forcing a specific language without user choice or documented justification is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The manifest describes this skill as focused on mobile-specific testing risks such as interruptions, weak network, background/foreground switching, permissions, compatibility, and performance for iOS/Android apps, H5 pages, and mini programs. The file adds extensive SEO testing guidance, which is a web marketing/discoverability concern rather than a mobile专项 testing concern and is not reflected in the declared purpose.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown file contains user-facing natural-language instructions only in Chinese, and there is no indication that the skill is region-specific or that users can opt into another language. Under the policy rule, forcing a specific language without user choice is a locale-policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file contains only Chinese headings and checklist content, which effectively forces a specific language for users. Under the policy, language constraints should either offer user choice or be clearly documented and justified as region-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: This markdown file presents all instructions and checklists exclusively in Chinese, which can amount to a language/locale policy issue when no user opt-in or alternative language is offered. The content does not state that the skill is region-specific or limited to Chinese-speaking users, so the language restriction appears implicit rather than justified.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.