Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
L003的描述全文为中文，且表述为通用型视频分镜生成指引，没有说明仅面向中文用户或特定区域，也未提供让用户选择输出语言的机制。对于适用于广泛用户的技能，这种默认强制单一语言可能构成自然语言层面的语言/locale 政策问题。
- Content
Security audit
video-storyboard-pro
Security checks for vulnerabilities and agentic risk
Overview
This is a Markdown-only video storyboard guidance skill with visible Chinese-language creative instructions and no code execution, credential access, network behavior, or persistence.
Reasonable to install if you want Chinese-language storyboard guidance. Before publishing broadly, consider narrowing the trigger wording and adding an explicit language/locale note so non-Chinese users are not surprised.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The skill's auto-load triggers include broad everyday phrases such as '把这个做成视频' and '转化为视频脚本', which can match many normal user requests beyond storyboard generation. This can cause the skill to activate in unintended contexts, increasing the chance that unrelated conversations are steered into this skill's workflow and outputs.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that the user can opt into another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The entire skill guidance is written as Chinese-only instructions for creating marketing videos, with no indication that users may choose another language or that the skill is limited to a Chinese-language or China-specific context. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
This markdown file contains all user-facing instructions and examples in Chinese, but it does not indicate that the skill is region-specific or that users may opt into another language. Under the language/locale policy, forcing a specific language without user choice can be a natural-language policy violation.
- Content
Static analysis
No suspicious patterns detected.