Back to skill

Security audit

low-budget-3d

Security checks for vulnerabilities and agentic risk

Overview

This is a text-only image-prompt style skill with disclosed Chinese low-budget 3D animation behavior and no hidden execution or data access.

Install this if you want a specialized prompt generator for this specific Chinese low-budget 3D animation aesthetic. Expect outputs to emphasize that locale and to provide English image-generation prompts by default.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (12)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The README states the output format is an English prompt plus negative prompt, which constrains the assistant’s output language/locale without explicit user opt-in. This can override user preference or higher-level system behavior, causing prompt-generation outputs to be forced into English even when the user requested another language.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown skill specifies that the final output must be an English prompt text, which imposes a language constraint on users. The file does not offer opt-in, alternatives, or justification for requiring English output, so it constitutes a natural-language locale policy issue.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
82% confidence
Finding

This JSON manifest/definition explicitly says the skill should detect cases where user intent 'should trigger' even when different wording is used, and emphasizes semantic understanding beyond listed keywords. Without clear scope limits or exclusion conditions, this can broaden activation beyond specific trigger phrases and increase unintended invocation risk.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

This JSON manifest-style file defines activation phrases such as "rough CGI," "amateur 3D animation," and "国产动画风格" as triggers, but it does not specify boundaries, exclusions, or negative examples. These phrases are broad enough to overlap with ordinary requests for visual style, which could cause unintended invocation outside the intended narrow 'low-budget-3d' context.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all operational instructions in Chinese and does not indicate that the user can opt into another language or that the skill is intentionally limited to a Chinese-speaking audience.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The title presents the skill with a Chinese-language form and the body content is primarily written in Chinese, with no indication that users may choose another language or locale. The policy for this audit flags language or locale constraints when a skill effectively forces a specific language without user opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The file presents the skill instructions and operational content entirely in Chinese, including headings, comments, and adaptation rules, without offering a language choice or indicating that the skill is region-specific. This can violate a language/locale policy when users are not given an explicit opt-in or alternative locale.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The file title and core guidance are written in Chinese and repeatedly require specifically Chinese visual references such as "国产儿童动画", "low-budget Chinese 3D animation", and "early Chinese CGI animation". This imposes a language/locale-specific constraint on outputs without any opt-in, alternative locale, or justification that the skill is intended only for a China-specific use case.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
77% confidence
Finding

The description and notes are presented in Chinese, but the file does not state that the skill is China/Chinese-specific or that users may choose another language. Forcing or assuming a single language without opt-in can violate language/locale policy requirements.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
72% confidence
Finding

The description and several trigger phrases are explicitly Chinese-language and culturally specific, but the file does not state that the skill is intended only for Chinese-language or China-specific usage. Because the policy requires avoiding forced language/locale behavior unless documented or user-selected, this may create an implicit locale constraint.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
77% confidence
Finding

This markdown file repeatedly frames the style specification in Chinese terms and provides Chinese-language rule text as the primary instruction set, while only partially mirroring content in English. Under the policy rule for language or locale constraints, this can be read as imposing a specific language/locale without explicitly offering user choice or opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

This markdown file is governed by SQP-3 for natural-language policy issues. The content presents key instructions in Chinese while also using English headings and labels, but it does not tell users that the skill is Chinese-language or offer an opt-in/choice of language, which can violate a language/locale policy requiring user choice.

Content

No source excerpt is available for this finding.