Back to skill

Security audit

AI 视觉导演

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language static-image art direction skill with no code execution, credential handling, persistence, or hidden data access.

Install this if you want Chinese-language assistance for static-image visual direction and prompt compilation. Be explicit when you want only a prompt versus actual image generation or editing, and specify another language if your agent supports it.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (50)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The manifest description is written entirely in Chinese, and the skill body likewise instructs behavior only in Chinese without any indication that users may choose another language. The policy specifically flags language or locale constraints when they are imposed without user opt-in or a documented justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The manifest metadata and default prompt are written to enforce Chinese-language behavior without indicating that this is user-selectable. This can create mismatches between user intent and agent behavior, reduce transparency, and increase the chance that downstream safety instructions or user constraints are misunderstood or handled inconsistently across languages.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The default invocation is broad and action-oriented, asking the system to transform arbitrary image requests into executable visual specifications and then optionally output prompts, generate, edit, or review images, without clear activation boundaries or exclusion logic. In agent environments, overly broad natural-language triggers can cause accidental or inappropriate routing, including use on requests outside the intended safe scope described in the skill metadata.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This plain-text file is entirely framed in Chinese and states the test objective in Chinese, with all user inputs and evaluation criteria likewise fixed to that language. Under the policy rule for language/locale, this is a natural-language constraint without any visible opt-in, alternative language option, or justification for restricting the skill to Chinese.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

Lines L3-L7 are entirely written in Chinese and present the skill instructions as mandatory, with no indication that users may choose another language or that the skill is intended only for a Chinese-speaking context. This creates a language/locale policy concern because it effectively forces a specific language without user opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

This markdown file presents all user-facing instructions in a single language and does not indicate that Chinese is optional or required for a region-specific purpose. That can violate language/locale policy when users are not given an explicit choice or opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

This markdown file contains user-facing instructions only in Chinese, which can impose a language constraint on users without opt-in. Under the policy, forced language or locale without user choice is a natural-language policy violation unless clearly justified as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The entire skill prompt is written as a prescriptive Chinese-language instruction set, with no indication that language is user-selectable or that the skill is specifically limited to Chinese-speaking use cases. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file contains natural-language instructions only in Chinese and provides no indication that the language choice is optional or tied to a region-specific requirement. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown skill content appears to require Chinese comprehension and does not provide an opt-in, alternative language, or explanation that it is intentionally region- or locale-specific. That creates a natural-language policy concern because it effectively forces a specific language on users.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The file consists entirely of Chinese-language instructions and does not offer any language or locale choice. Under the policy rules, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly documented and justified, which is not present here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The file’s instructional content is entirely in Chinese and does not indicate that the user can choose another language or that the locale is intentionally constrained. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The file consists entirely of Chinese-language instructions and does not indicate that the user can choose another language or that the skill is specifically limited to a Chinese-speaking context. This creates a natural-language locale policy concern because it implicitly enforces a specific language without opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The instructions are written entirely in Chinese and prescribe the task in that language without indicating that the user may choose another language or locale. Under the stated policy, forcing a specific language without opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

The entire prompt content is written as a prescriptive image-generation instruction in Chinese, and there is no indication that language selection is optional or tied to a region-specific requirement. This can violate language/locale policy because it effectively forces a specific language without user opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

This markdown file contains the operative skill instructions only in Chinese, with no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-language context. Under the language/locale policy rule, forcing a single language without opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The file’s operational instructions are entirely in Chinese and provide no indication that language selection is optional or user-configurable. Under the stated policy, forcing a specific language or locale without opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The file's operative instructions are presented only in Chinese, which can impose a language requirement on users without opt-in. Under the policy, forcing a specific language is a natural-language policy violation unless the skill offers language choice or clearly documents a justified locale-specific scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

This file contains natural-language instructions exclusively in Chinese and does not indicate that Chinese is optional or that the skill is region-specific. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The file is entirely written in Chinese and specifically constrains the scene to Shanghai, without indicating any user choice of language or locale. The policy explicitly calls for flagging language or locale requirements when they are imposed without opt-in or documented justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file contains user-facing instructions only in Chinese, which can violate a language/locale policy when the skill does not provide user opt-in or alternative language support. There is no indication that the Chinese-only constraint is intentional, optional, or justified by a region-specific use case.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The file’s operative instruction is entirely in Chinese and provides no indication that language choice is optional or user-selected. Under the language/locale policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

This markdown file contains user-facing natural-language instructions exclusively in Chinese. Under the policy, forcing a specific language without user opt-in or justification is a language/locale policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The entire skill content is written as a Chinese prompt and provides no indication that the user can choose another language or locale. Under the policy, forcing a specific language without opt-in is a natural-language policy violation unless the constraint is explicitly justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file contains only Chinese natural-language instructions and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking context. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.