Security audit

Market Radar

Security checks for vulnerabilities and agentic risk

Overview

The skill has a coherent market-monitoring purpose, but it needs review because it runs Bash-based browser commands on user-controlled search terms and URLs without validation.

Review before installing. Use only with public https competitor URLs you trust, and avoid internal, localhost, private-network, or unusual scheme URLs. The publisher should add explicit URL validation, percent-encoding, redirect checks, and safe non-shell argument passing before broad use.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:52
Finding: Shell Command Injection Through Unescaped User-Controlled Input
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:108
Finding: Unrestricted User-Supplied URL Browsing Enables Server-Side Request Forgery
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The description says the skill should be used when the user is 'in Chinese' and that it delivers a structured Chinese daily brief. This imposes a language requirement and output locale by default rather than offering a user-selectable language option, which matches the policy's language/locale violation criteria.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The output rules explicitly require '全程中文' and direct Chinese report formatting, with no indication that the user may request another language. This is a natural-language locale constraint that is not justified as region-specific compliance and does not provide user choice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The document is written entirely in Chinese and instructs the agent to use Chinese output labels such as “标注 🚨/✅” and a Chinese output format. This imposes a specific language/locale on skill behavior without any user opt-in or documented justification for a region-specific use case.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.