Security audit
Security checks for vulnerabilities and agentic risk
The skill is mostly a coherent bridge for Meteor Master AI, but it exposes sensitive stream/local metadata and supports irreversible bulk changes without enough guardrails.
Install only if you trust the mma-bridge npm package and Meteor Master AI instance. Avoid administrator installs, pin or verify the npm package where possible, and require explicit user confirmation before delete, collect, uncollect, analyze, or export actions. Treat getCurrentInfo and getDataDetail output as sensitive because it may include camera stream credentials, local file paths, proxy settings, coordinates, and device metadata.
SKILL.md:60Unpinned Global npm Dependency Creates a Supply-Chain Execution Risk
references/getCurrentInfo.md:38Current-Information API Returns Plaintext Stream Credentials and Sensitive Local Metadata
references/deleteGroup.md:23Irreversible Batch Deletion Is Documented Without a Mandatory Confirmation Control
The natural-language instructions are written to direct future conversation behavior around Meteor Master AI terminology and are presented only in Chinese, including mandatory phrasing like '请确保' and '尽量使用全称'. This imposes a language/locale preference without explicitly offering the user a choice or opt-in.
This markdown file documents that mma list will '删除无响应或响应无效的实例文件', which is a file-deletion operation that can affect the local system state. The description does not provide a user-facing warning or caution about this cleanup behavior or its implications.
The documentation is entirely in Chinese with no language selection or opt-in, which can prevent non-Chinese-speaking users or reviewers from understanding operational constraints, side effects, and failure conditions. In a security-sensitive agent ecosystem, unreadable documentation increases the chance of misuse, unsafe execution, and missed review findings because users may invoke the API without understanding what local folder paths and image-processing behavior imply.
The file presents all user-facing descriptive content, parameters, responses, and cautions in Chinese only. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly justified, which this document does not provide.
Nearly all user-facing documentation is written in Chinese, with no indication that the skill is region-specific or that another language option is available. Under the stated policy, forcing a specific language without user opt-in or documented justification is a natural-language policy violation.
The markdown content is written entirely in Chinese, including headings, parameter descriptions, examples, and response explanations, with no indication that the user can choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation unless the regional constraint is clearly documented and justified.
The file’s natural-language instructions, examples, and warnings are entirely in Chinese, and there is no indication that the skill is region-specific or that users can opt into this language. Under the policy, forcing a specific language without user choice is a natural-language policy violation.
The documentation explicitly allows writing an exported image to an arbitrary user-specified directory or JPG file path, but provides no warning about overwrite behavior, path safety, or filesystem side effects. In a bridge/agent context, this can lead to unintended file creation or overwriting if an agent passes unsafe paths, especially because the examples encourage direct use of absolute paths.
This markdown file uses only Chinese for its description, commands context, and field explanations. Under the policy for natural-language violations, forcing a specific language without user opt-in is a reportable issue unless the locale constraint is explicitly justified, which is not present here.
The skill documentation is written entirely in Chinese, including operational instructions, parameter descriptions, examples, and notes, with no indication that language selection is optional or that the skill is region-specific. This can constitute a language/locale policy violation under the rule for natural-language policy concerns.
The documentation describes an operation that removes saved user state (favorites) for one or many records, but it does not clearly warn that this is a state-changing/destructive action. In an agent skill context, especially with batch support, missing cautionary language increases the risk of unintended bulk modifications by users or downstream agents that may treat the command as routine retrieval rather than mutation.
L178-L188 明确声明 mma post 统一调用格式必须包含 --data-file，且 L188 强调即使传空对象也必须提供该参数。但 L219-L221 的示例却展示了 mma post --method getCurrentInfo，未传 --data-file。这属于文档内部对实际使用方式的主动矛盾，可能误导调用方。
The markdown states that after checking the video information, analysis starts automatically. It does not explicitly warn users up front that providing a file path will trigger immediate processing of the file, which is a behavior affecting user data handling and should be disclosed clearly.
SQP-3 applies to all file types and includes language or locale policy violations. This file presents the operational instructions entirely in Chinese, with no user opt-in, alternative language option, or justification that the skill is intended only for a Chinese-speaking or region-specific audience.
The documented API response includes local file paths, exported media locations, source filenames, and EXIF camera metadata, all of which can reveal sensitive host, filesystem, and device details to users of the skill. While this is an informational disclosure issue rather than active code execution, the documentation omits any warning or guidance about handling this sensitive output, increasing the risk of accidental exposure or unsafe downstream logging/sharing.
L032-L039 明确说明 type 的可选值包含 0，且示例请求在 L019 和 L050/L059 也实际使用了 0 表示流星。L173 却写成“必须在 1-6 之间”，这会把前文定义的合法值 0 排除掉，属于文档对接口行为的直接自相矛盾。
The skill documentation is written entirely in Chinese, beginning with the section heading and description, with no indication that users may choose another language or that the locale restriction is intentional. Under the language/locale policy rule, forcing a specific language without opt-in or justification is a natural-language policy concern.
L237 说明 command 是“用于排序的具体值，即排序字段名”，暗示其应为字符串字段名；但示例响应在 L129、L133、L141、L149、L157、L165、L173 中均将 command 表示为整数 0-6。该文档说明与其展示的实际接口行为直接矛盾，属于文档意图与内容不一致。
SQP-3 applies to all file types and includes language or locale policy violations. The natural-language instructions and examples are entirely Chinese, with no opt-in, alternative language, or statement that the skill is intentionally limited to a Chinese-speaking or region-specific context.
The file's natural-language instructions and descriptions are entirely in Chinese, with no indication that language selection is optional or that the skill is intentionally limited to a Chinese-speaking or region-specific audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
No suspicious patterns detected.