Security audit

HTML Interactive Presentation

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly purpose-aligned, but users should review it because it may send article-derived content to external AI/TTS providers and uses an unpinned npx build command.

Install only if you are comfortable using external AI/TTS services for the article content or derived narration, and prefer using placeholder/local assets for confidential documents. Before running the build, create or inspect a package.json and lockfile and use a pinned local Vite dependency instead of relying on an unpinned npx download.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:264
Finding: Unpinned Third-Party Package May Be Downloaded and Executed Through npx
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The README presents the skill's behavior and usage entirely in Chinese, including the example invocation, with no indication that users may interact in another language or that the locale restriction is intentional. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The README explicitly promotes use of external MiniMax image and speech services on user-supplied article content, but does not warn that text, prompts, or derived content may be transmitted to third-party providers. In a skill that processes arbitrary Markdown, this can cause unintended disclosure of proprietary, personal, or confidential material because users may assume the workflow is local unless data-sharing is stated clearly.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The manifest description states the skill will transform content in Chinese phrasing and the body repeatedly specifies a Chinese "B站风" narration style, but nowhere offers the user a language or locale choice. This creates a natural-language locale policy concern because the skill appears to impose a specific language/style by default rather than making it optional or clearly region-scoped.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 96% confidence
Finding: The skill instructs users to run npx vite build, which may fetch and execute an unpinned package version from the registry if vite is not already installed locally. That creates a supply-chain risk: builds may become non-reproducible and a compromised or typosquatted package version could execute arbitrary code on the user's machine.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.