Security audit

Software Data Github Interact Developer Helper

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only workflow helper with broad auto-activation wording but no evidence of malicious behavior.

This skill is reasonable to install if you want broad GitHub-style development workflow guidance. Consider narrowing its keywords or disabling implicit invocation if you run many skills and want more precise routing.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (13)

Vague Triggers

High

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The trigger phrases are extremely generic (e.g. 'Help me', 'I need a practical workflow', 'Use ... to handle ...') and overlap with ordinary user requests, which can cause unintended skill activation or routing collisions. In an agent ecosystem, overbroad triggers can misdirect tasks into this skill without clear user intent, increasing the chance of inappropriate actions, confusion, or policy bypass through accidental invocation.
Content: No source excerpt is available for this finding.

Vague Triggers

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The trigger keyword list is broad enough to match many ordinary developer requests such as 'github', 'cli', 'issue', 'run', and 'api', which can cause the skill to activate outside its intended scope. Over-broad activation increases the chance of inappropriate routing, unexpected tool usage, and reduced operator control, especially for a skill positioned to produce implementation steps and commands.
Content: No source excerpt is available for this finding.

Vague Triggers

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: 触发关键词包含 software-and-data、github、cli、run、api、issues、bug fix 等高度通用词，极易在普通对话中被无意匹配并激活技能。这会扩大技能适用范围，导致在不相关场景下介入用户请求，增加误执行、错误路由或被攻击者利用进行提示注入放大的机会。
Content: No source excerpt is available for this finding.

Vague Triggers

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The trigger sentence is broad enough to match ordinary user language rather than a narrowly scoped invocation pattern. That can cause unintended activation of the skill in unrelated contexts, increasing the chance the agent applies GitHub/workflow behaviors when the user did not actually request this skill, which is a prompt-routing and scope-control weakness rather than direct code execution.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The trigger phrases are broad enough to activate on common software and GitHub-related requests, which can cause the skill to run outside the user's intended context. Overbroad activation increases the chance of inappropriate tool use, confusing handoffs, or unintended execution paths in multi-skill environments.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 71% confidence
Finding: This file is entirely presented in Chinese and does not state that language selection is optional within the skill experience. Under the language/locale policy, forcing a specific language without user opt-in can be a policy concern unless clearly documented as region-specific.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The example trigger phrases use very generic wording like 'Help me' and 'I need a practical workflow', which mirrors normal conversational requests and can cause accidental invocation. Because examples often seed classifier behavior or author/operator expectations, vague examples amplify the over-triggering risk created by the keyword list.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 83% confidence
Finding: This zh-CN skill file presents substantial user-facing instruction text in English, including the target user description and validated-demand statement, without indicating that the user may choose Chinese or English. In a locale-specific file, this can amount to an implicit language constraint or inconsistent language policy for users expecting Chinese guidance.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: 示例触发语句是宽泛的自然语言请求，例如“Help me ...”或“I need a practical workflow ...”，与普通用户表达高度重叠，容易造成技能与日常对话冲突。这种设计会提高误触发率，使系统在未经明确用户选择的情况下调用该技能，削弱边界控制。
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The default prompt contains a very broad activation phrase covering common terms like software, data, GitHub, interact, CLI, issue, workflow, checklist, analysis, and implementation support. This overlap with ordinary developer requests increases the chance of over-triggering, causing the skill to be selected in situations where it is not the best or safest fit and potentially exposing users to unintended guidance or actions.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill enables implicit invocation without any visible trigger constraints, so the platform may auto-activate it for loosely related user requests. Because this skill is framed around broad software, GitHub, CLI, issue, analysis, and implementation support, ambiguous activation can cause the agent to enter sensitive development workflows unexpectedly and influence actions or outputs outside the user's clear intent.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The invocation guidance combines generic request wording with weak scope boundaries, making the skill eligible for activation on many benign, everyday prompts. In an agent ecosystem, overly permissive routing increases accidental skill selection, cross-skill interference, and the possibility of a user being steered into actions or assumptions intended for a different workflow.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The file declares separate English and Chinese instruction and guide files, but does not state how the user's language preference is determined or that language selection is optional. This can create a locale-policy concern if the skill defaults users into a language without explicit opt-in.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.