Security audit

抖音七日点赞飙升榜

Security checks across malware telemetry and agentic risk

Overview

The skill mostly performs a Douyin leaderboard lookup, but it also advertises recurring subscription/push behavior without enough scope, storage, or opt-out detail.

Install only if you are comfortable giving the skill a RedFox API key and using it for on-demand Douyin ranking queries. Treat the advertised subscription/push feature cautiously until the publisher documents how subscriptions are created, stored, delivered, cancelled, and deleted.

SkillSpector

By NVIDIA

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Description-Behavior Mismatch

Medium

Confidence: 94% confidence
Finding: The interaction guide advertises a subscription and scheduled push capability that is outside the declared scope of a query-only leaderboard lookup skill. Scope expansion like this is risky because it can imply background data retention, recurring notifications, or external integrations that were not disclosed in the manifest or reviewed as part of the skill’s stated behavior.

Description-Behavior Mismatch

Medium

Confidence: 95% confidence
Finding: Documenting subscription as a supported feature despite the manifest describing only ranking queries creates a capability mismatch that can hide unreviewed behavior. If implemented, this could enable persistent user engagement features, collection of user preferences, and outbound pushes without clear disclosure, consent boundaries, or platform approval.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.