Back to skill

Security audit

Beauty GEO Writer

Security checks for vulnerabilities and agentic risk

Overview

This is a prompt-only writing aid for medical-aesthetics educational content, with no code execution, credentials, external calls, or persistence in the inspected artifacts.

Before installing, treat this as a specialized content-writing skill for Chinese medical-aesthetics marketing and educational material. Generated medical or treatment-related claims should still be reviewed by qualified staff for accuracy, local advertising rules, and patient-safety boundaries.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Anti-Refusal Statement

High
Category
Anti-Refusal
Confidence
70% confidence
Finding

Skill instructs the agent to never refuse or to always comply. Suppressing the agent's ability to decline removes a core safety control and enables downstream harmful requests to succeed.

Content

Scanner excerpt · skill.md (reported line 97)May include surrounding context.

md
## Core principle / 核心原则

**Always answer the reader's real question first.**

内容必须先回答问题,再展开解释。  
不要让品牌先出现,不要让结论埋得太深。

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
83% confidence
Finding

The README describes the skill almost entirely in Chinese and all example invocations are written in Chinese, which signals a default language expectation for use. There is no statement that users may choose another language or locale, so the skill description effectively imposes a specific language context without opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
83% confidence
Finding

The instruction requires the opening answer to appear within '150–250 Chinese characters', which imposes a specific language/locale expectation. Elsewhere the skill is bilingual, but it does not clearly offer the user a choice of output language or explain that Chinese-only constraints are optional.

Content

No source excerpt is available for this finding.