Back to skill

Security audit

lxd-report

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only report-analysis skill with no code execution, network access, persistence, or hidden data handling.

Install this skill if you want Chinese-language structured feedback on workplace report drafts. Be aware it may activate when pasted text merely looks like a report draft, and its output format is fixed in Chinese unless higher-priority instructions override it.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

High
Category
Not specified by scanner
Confidence
96% confidence
Finding

The skill’s activation criteria are very broad: it should trigger not only when the user explicitly asks for analysis, but also whenever content merely appears to be a report draft. This can cause unsolicited interception of ordinary workplace text, overriding user intent and increasing the chance that unrelated or sensitive content is processed under the skill’s rigid analysis workflow.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The instruction to ALWAYS use a fixed output template in Chinese/this locale constrains the assistant to respond in a specific language and format regardless of the user’s preferences or surrounding context. In multilingual or accessibility-sensitive settings, this can lead to misunderstanding, accidental disclosure through unexpected rendering, or inability for reviewers to correctly interpret the output.

Content

No source excerpt is available for this finding.