Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
Without declared permissions the skill's intent is opaque and cannot be validated.
- Content
Security audit
Bytesagain Copywriter Cn
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local marketing-copy template generator with no evidence of credential access, persistence, exfiltration, or destructive behavior.
Installers should expect a simple local copywriting helper that mostly emits Chinese marketing templates. Review the generated copy before use, especially because some examples include placeholder claims like user counts, discounts, and testimonials that must be replaced with truthful content.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The 'Use when' description is broad enough to match many ordinary writing tasks, which can cause the agent to invoke this skill outside its narrow intended context. Over-broad triggering is dangerous because it increases unintended skill activation and prompt-surface exposure, even though this specific skill appears limited to benign copywriting guidance.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The file labels itself as a Chinese copywriting generator, which imposes a specific language/locale behavior. Under the policy, forcing a language without user opt-in is a natural-language policy violation unless a justified region-specific constraint is clearly documented, which is not present here.
- Content
Static analysis
No suspicious patterns detected.