Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
Without declared permissions the skill's intent is opaque and cannot be validated.
- Content
Security audit
Bytesagain Social Copywriter
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local social-media copy template generator and does not show hidden data access, persistence, or destructive behavior.
Installers should expect canned social media templates and should review generated copy before posting. The skill does not appear to post to accounts or read private data, but its trigger wording is broad and the Weibo mode intentionally produces Chinese-language output.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The weibo subcommand emits all generated content and guidance in Chinese, which imposes a specific language/locale on users of that command. There is no nearby natural-language indication that the user can choose another language or that the locale restriction is explicitly justified as a region-specific mode.
- Content
Vague Triggers
Low
- Category
- Not specified by scanner
- Confidence
- 86% confidence
- Finding
The description says to use the skill for broad situations like 'when writing tweet threads' or 'creating LinkedIn posts,' without clearly delimiting activation boundaries or exclusions. In a markdown skill description, this can function as an overly broad trigger that may match many ordinary drafting requests rather than a narrowly scoped invocation condition.
- Content
Vague Triggers
Low
- Category
- Not specified by scanner
- Confidence
- 84% confidence
- Finding
The phrase 'Use when creating social media content' is very broad and does not clarify when this skill should be preferred over generic writing help. The lack of explicit boundaries or negative examples increases the chance of unintended invocation in common content-writing scenarios.
- Content
Static analysis
No suspicious patterns detected.