Security audit
Security checks for vulnerabilities and agentic risk
This skill tracks K-Pop updates using public web sources and disclosed local tracking files, with optional scheduled checks only when the user asks.
Before installing, be aware that this skill stores followed artists and reported URLs in local workspace files, uses a browser profile to check social and shopping sites, and can create twice-daily cron checks only if you explicitly request automatic updates.
The declared purpose emphasizes idol-update tracking, but the skill also performs persistent local configuration and history management. Hidden state changes are risky because users may invoke a content-tracking skill without realizing it will modify local data, creating opportunities for stealthy persistence or undesired data retention.
The declared purpose emphasizes idol-update tracking, but the skill also performs persistent local configuration and history management. Hidden state changes are risky because users may invoke a content-tracking skill without realizing it will modify local data, creating opportunities for stealthy persistence or undesired data retention.
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.
- New song MV or audio on YouTube this week
- Concept photos, tracklist, teaser schedule
Output rules:
- List confirmed comeback date (or "目前無回歸消息")
- If new MV/song released this week → include YouTube link
- If comeback is announced but not yet released → show schedule/timeline
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.
- New song MV or audio on YouTube this week
- Concept photos, tracklist, teaser schedule
Output rules:
- List confirmed comeback date (or "目前無回歸消息")
- If new MV/song released this week → include YouTube link
- If comeback is announced but not yet released → show schedule/timeline
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.
- New song MV or audio on YouTube this week
- Concept photos, tracklist, teaser schedule
Output rules:
- List confirmed comeback date (or "目前無回歸消息")
- If new MV/song released this week → include YouTube link
- If comeback is announced but not yet released → show schedule/timeline
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.
- New song MV or audio on YouTube this week
- Concept photos, tracklist, teaser schedule
Output rules:
- List confirmed comeback date (or "目前無回歸消息")
- If new MV/song released this week → include YouTube link
- If comeback is announced but not yet released → show schedule/timeline
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.
- New song MV or audio on YouTube this week
- Concept photos, tracklist, teaser schedule
Output rules:
- List confirmed comeback date (or "目前無回歸消息")
- If new MV/song released this week → include YouTube link
- If comeback is announced but not yet released → show schedule/timeline
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.
- New song MV or audio on YouTube this week
- Concept photos, tracklist, teaser schedule
Output rules:
- List confirmed comeback date (or "目前無回歸消息")
- If new MV/song released this week → include YouTube link
- If comeback is announced but not yet released → show schedule/timeline
Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.
- New song MV or audio on YouTube this week
- Concept photos, tracklist, teaser schedule
Output rules:
- List confirmed comeback date (or "目前無回歸消息")
- If new MV/song released this week → include YouTube link
- If comeback is announced but not yet released → show schedule/timeline
The skill instructs the agent to create and update local files (config.json and check_history.json) but does not declare any explicit tool scope or permissions boundary for file access. That mismatch can lead to overly broad or implicit filesystem capabilities, making unintended file writes harder to audit and constrain.
The trigger list is broad and includes generic entertainment terms, which can cause unintended invocation of a skill that reads and writes tracking files and may configure cron jobs. Accidental activation increases the chance of unanticipated persistence, external browsing, or scheduled tasks being set up in response to loosely related user requests.
The file states that updates are summarized in Traditional Chinese, and later reinforces this with a rule to translate content to 繁體中文. This imposes a fixed language/locale choice without indicating user choice, opt-in, or a documented region-specific justification.
The skill directs the agent to create and modify tracking files automatically if they do not exist, without an explicit warning or confirmation step. Silent file creation and modification are dangerous because they introduce persistent state changes and data retention that the user may not expect from a simple content-tracking request.
This markdown file contains substantial user-facing natural language in Chinese, including headings and feature descriptions, but does not indicate that the skill is intended only for Chinese-speaking users or that language is configurable. Under the policy rule for language/locale violations, forcing a specific language without opt-in can be a policy concern.
SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all headings and operational descriptions only in Traditional Chinese, with no opt-in, alternative language, or justification that the skill is limited to a Chinese-speaking audience.
No suspicious patterns detected.