Security audit

Harmonyos Mobpush Integration

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent MobPush integration guide, but it asks users to place a MobPush app secret in a project file and application source without enough handling safeguards.

Review this skill before installing. Use it only in a test or isolated HarmonyOS project, pin and review the ohpm packages, and do not put real MobPush secrets into a repository-backed workbook or source file unless MobTech confirms those values are safe for client distribution. Add ignore rules and rotate any secret that was committed, shared, or built into an app by mistake.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:125
Finding: Unpinned Third-Party SDK Dependencies
Content: View full analysis
Remediation: View remediation
ohpm install @zztsdk/mobpush@ ``` 2. Commit and enforce the package manager lockfile so that all developers and CI jobs resolve identical artifacts. 3. Verify package provenance, publisher identity, registry source, checksums, and signatures where ohpm supports them. 4. Configure CI to reject unexpected lockfile changes and dependency sources outside an approved registry. 5. Review release notes and package contents before updating either SDK. 6. Run dependency installation and builds in a least-privileged, isolated environment without unrelated credentials. 7. Add automated dependency and software-composition scanning to the build pipeline. ]]>

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:85
Finding: MobPush Secret Stored in Plaintext and Embedded in Application Source
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 97% confidence
Finding: The declared description presents the skill as an interactive integration assistant for HarmonyOS NEXT MobPush setup, triggered by user requests and advancing through a 6-step workflow with confirmations. The supplied code does not implement an interactive guide at all. Instead, it uses openpyxl to create a local Excel template file with predefined sheets and instructional content. While the template content is related to MobPush and includes some integration guidance, the primary behavior is materially different: file generation rather than interactive assistance. This is a meaningful description-behavior mismatch.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill description is written as a direct operational instruction in Chinese and presents the workflow as the default interaction mode, with no indication that users may choose another language. Under the policy, language or locale constraints should be opt-in or explicitly justified; this file provides neither.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The listed triggers such as '帮我配置鸿蒙推送通知' and especially '一键集成 MobPush（鸿蒙）' / '自动配置 MobPush（鸿蒙）' are broad imperative phrases that may overlap with general requests for HarmonyOS push configuration. Although the document is MobPush-focused, it does not provide exclusion conditions or negative examples to clarify when the skill should not activate versus other push-related skills.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This markdown file presents all example prompts exclusively in Chinese, including section headings and invocation examples, with no indication that other languages are supported or that Chinese is a deliberate, documented locale restriction. That can violate a language/locale policy when users are not given an explicit language choice or opt-in.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.