Security audit

feishu-bitable-architect

Security checks for vulnerabilities and agentic risk

Overview

This skill is a Chinese-language planning aid for designing Feishu Bitable schemas and does not include code, hidden execution, persistence, or credential handling.

Install this if you want a Chinese-language assistant to help design Feishu Bitable structures before another tool creates them. Review the proposed tables, fields, views, and automations before approving any actual Feishu changes, especially for business records or workflows.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The workflow description presents a generic multi-step process from 'you propose a need' to 'Skill diagnoses business' without defining strict activation boundaries or disambiguation rules. Because the skill is framed around common business-planning language, an orchestrator may activate it for vague requests and let it steer the conversation toward table creation and downstream execution, increasing the chance of unintended actions.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The trigger examples are broad natural-language requests such as '帮我搭建一个客户管理系统' and '我要管理销售流程', which can overlap with ordinary conversation and loosely related planning tasks. In an agent environment, this can cause unintended skill activation and prompt hijacking of the interaction flow, leading the agent to ask diagnostic questions or produce structured build instructions when the user did not explicitly intend to invoke this skill.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The manifest description, all operational instructions, and the example dialogue are written as mandatory Chinese interaction patterns, but the file does not state that the skill is intentionally limited to Chinese users or provide an opt-in language choice. Under the policy, forcing a specific language without user choice is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: This markdown file contains all user-facing guidance in Chinese, and nowhere indicates that the language is optional or limited to a specific regional audience. Under the policy rule for natural-language violations, forcing a specific language without user opt-in is a reportable issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The file begins with a Chinese-only title and the entire document is written exclusively in Chinese, with no indication that users may choose another language or that the locale restriction is required for a region-specific purpose. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The file title and introductory text are entirely in Chinese, with no indication that other languages are supported or that the Chinese-only presentation is required for a region-specific or compliance-related reason. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.