Security audit

ym-anime-plot-outline

Security checks for vulnerabilities and agentic risk

Overview

This is a text-only anime plot outlining skill with no scripts, network use, local data access, or hidden persistence.

Installers should expect a Chinese-first creative writing helper for anime-style plot outlines. Review the language and trigger wording if you need strict multilingual behavior or very narrow activation, but the inspected artifacts do not show security-sensitive actions.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Vague Triggers

Medium

Confidence: 90% confidence
Finding: The skill’s '何时使用' section expands activation beyond the declared trigger list by instructing use for broader situations such as any user with a protagonist idea or setting card. This can cause over-broad routing, making the skill activate in contexts the user did not explicitly request, which may override more appropriate skills or lead to irrelevant content generation.

Natural-Language Policy Violations

Low

Confidence: 83% confidence
Finding: The skill mandates Chinese-language headings, examples, and output structure without offering a user-language fallback. In multilingual environments this can produce outputs in an unintended language, degrading reliability and causing user confusion, especially if the surrounding system or user interaction is in another language.

Natural-Language Policy Violations

Low

Confidence: 94% confidence
Finding: This markdown file contains user-facing instructional content exclusively in Chinese, including the title and all guidance. Under the language/locale policy rule, forcing a specific language without user opt-in can be a natural-language policy violation when no alternative or opt-in is provided.

Natural-Language Policy Violations

Low

Confidence: 93% confidence
Finding: This markdown file contains user-facing instructions exclusively in Chinese, including the title, usage guidance, and all field descriptions. Under the policy for natural-language violations, forcing a specific language without user opt-in can be a locale-policy issue when no alternative or opt-in is provided.

Static analysis

No suspicious patterns detected.