Security audit

jiedan-platform-suite

Security checks for vulnerabilities and agentic risk

Overview

This skill is a small, disclosed Cinema Agent suite manifest for order-platform integrations, with no substantive executable behavior in the inspected package.

Install only if you intend Cinema Agent to consume these platform declarations and enable related routing, cinema pre-binding, and order or market-analysis polling. Review the separate single-platform packages before installing them, since this suite mostly lists and routes to those packages.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The documentation presents the platform packages as 'data-only' and says no marketplace package code is executed, yet it also states that installation triggers hot-loading, adapter routing, pre-binding, and polling/market analysis behavior. That mismatch can mislead users and reviewers about the operational effects of installation, causing them to approve a package that changes runtime behavior and initiates automated processing they did not expect.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill states that installation automatically enables hot-loading, routing, pre-binding, and polling, but it does not clearly warn the user about these automatic operational changes before installation. Undocumented automatic state changes can lead to unintended external connections, task execution, or order-processing behavior in a sensitive operational environment.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 83% confidence
Finding: All user-facing natural-language documentation in this skill file is presented only in Chinese, with no indication that the skill is region-specific or that another language option is available. Under the stated policy, forcing a specific language without opt-in or justification is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The skill name and description are written entirely in Chinese, and the file provides no indication that language selection is optional or that the skill is intended only for a Chinese-speaking or region-specific audience. This can violate language/locale policy when users are not given an explicit choice or justification for the imposed locale.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 83% confidence
Finding: This manifest uses platform tags such as "mahua", "secretonion", "hahapiao", and other non-English identifiers throughout, with no indication that users can choose a language or locale. Because SQP-3 applies to all file types and covers language/locale policy concerns, the file presents a locale-specific naming scheme without documented user choice or justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 85% confidence
Finding: The manifest uses Chinese-only natural-language fields for the skill name and description, but does not document that the skill is intended only for Chinese-speaking users or a China-specific deployment. Under the policy, forcing a specific language without opt-in or justification can be a locale-policy issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 83% confidence
Finding: The natural-language description is entirely in Chinese and presents the skill as such without any indication that language is selectable or that the package is intentionally limited to a Chinese-speaking or region-specific context. Under the policy for locale/language constraints, this can be a natural-language policy issue when no opt-in or justification is stated.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.