Ae1
High
- Category
- analysis-evasion
- Content
sibling scenario skill: this skill packages only its `SKILL.md` and
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Security audit
shorts-reels
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed Ofox video-generation workflow that asks for cost approval before paid API calls and does not show hidden persistence or destructive behavior.
Before installing, understand that this skill can spend money through your Ofox account after approval and depends on a separate ofox-video-core skill for the actual API script. Review cost tables before approving runs, use an explicit output directory, and install missing dependencies yourself rather than letting an agent run installer commands silently.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Rogue AgentSelf-Modification, Session Persistence
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (11)
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
- npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
- npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
- npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
- npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
- npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
- npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
- npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 70% confidence
- Finding
- npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Intent-Code Divergence
Medium
- Confidence
- 93% confidence
- Finding
- Lines L044-L046 explicitly state 'Nothing here writes a prompt' and the surrounding section repeatedly says prompt writing belongs to scenario skills. Later, L657-L659 says 'This skill drafts a prompt; it doesn't write one,' which contradicts the earlier documentation about the skill's role.
Session Persistence
Medium
- Category
- Rogue Agent
- Content
| anime or manga-styled | [`seedance-anime-drama`](../seedance-anime-drama/SKILL.md) | | ambient / mood b-roll — no product, no people, no beat: rain on a window, steam off a cup, a city at dusk | **no scenario skill owns this.** Go straight to the shared craft: [`prompt-structure.md`](../ofox-video-core/references/prompt-structure.md) → `The vendor's own formula (ByteDance first-party)` for the four-sentence template, `Style anchor — the texture layer` for the look, `Camera language` for the move | Write it there, run the set through here. The two things this skill adds on top are **vertical** and **cheap enough to throw most of them away** — and that second one is the whole reason it exists separately.
- Confidence
- 60% confidence
- Finding
- Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
Static analysis
No suspicious patterns detected.