Security audit

ym-gift-pick-helper

Security checks for vulnerabilities and agentic risk

Overview

This is a plain-text Chinese gift recommendation helper with no executable code, network use, persistence, or hidden high-impact access.

Install this if you want Chinese-language gift advice. Be aware it may activate on general gift-idea requests, it does not fetch current prices or links, and business or professional gifting advice should still be checked against the recipient's rules and local norms.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The trigger phrases are broad, high-frequency user utterances such as '送什么礼物' and 'gift ideas', which can cause the skill to activate in cases where the user did not intend to invoke this specific helper. Unintended invocation can route ordinary conversation into this skill, causing irrelevant responses, degraded UX, or accidental handling of user context that should have stayed with the base assistant.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: This markdown file contains user-facing guidance only in Chinese, which can amount to a language/locale policy violation when no user opt-in or alternative language option is provided. The file does not state that it is intended exclusively for a Chinese-speaking or region-specific context, so the forced language choice appears undocumented.

Natural-Language Policy Violations

Medium

Confidence: 92% confidence
Finding: The file’s natural-language instructions and placeholders are all in Chinese, which effectively forces a specific language for use of the skill. The policy allows locale constraints only when they are documented and justified, or when users are given an explicit language choice, neither of which appears here.

Static analysis

No suspicious patterns detected.