Security audit

ym-product-listing-check

Security checks for vulnerabilities and agentic risk

Overview

This skill is a text-only Chinese product-listing checklist that does not request platform access, network use, file mutation, persistence, or credentials.

Install this if you want a Chinese-language checklist for product listing completeness and wording-risk review. Users should understand it is not a live platform compliance checker or legal review, and broad phrases like "pre-listing check" may invoke it for product-launch contexts unless they ask for a different kind of launch review.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

Medium

Confidence: 93% confidence
Finding: The description says the skill should be used when the user says "上架前检查", but that phrase can refer to many different checks before publishing or launching, not specifically product listing completeness. The file does not provide exclusion conditions or negative examples to constrain when this trigger should not invoke the skill.

Vague Triggers

Medium

Confidence: 90% confidence
Finding: These phrases are common conversational requests that could apply to many review tasks beyond this skill's intended scope. Because the file does not clearly distinguish qualifying contexts from non-qualifying ones, the activation guidance risks unintended invocation.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: This file contains user-facing natural-language guidance only in Chinese, and nowhere indicates that the skill is region-specific or that users may choose another language. That can violate language/locale policy because it forces a specific language without user opt-in.

Natural-Language Policy Violations

Medium

Confidence: 94% confidence
Finding: The entire template and its instructions are written in Chinese and include mandatory wording requirements such as "开头必须写明" and specific required output terms. This imposes a language/locale constraint on users without any opt-in mechanism or stated region-specific justification, which matches the policy-violation category for language or locale restrictions.

Natural-Language Policy Violations

Low

Confidence: 82% confidence
Finding: This file contains user-facing instructional content exclusively in Chinese and does not state that the skill is intended only for Chinese-speaking users or offer an alternative language option. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is clearly documented and justified.

Static analysis

No suspicious patterns detected.