Security audit

blooming-elf 绽放精灵

Security checks for vulnerabilities and agentic risk

Overview

This is a plant-care reminder skill that stores plant records, creates reminders after confirmation, and may use city weather, with no evidence of deception or malware.

Install if you are comfortable with the skill keeping persistent plant-care records, updating a local MEMORY.md configuration, creating plant archive/log documents, and using your city for weather-aware reminders. Keep any optional knowledge-base association limited to plant documents, and review reminder settings before confirming automation.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Context-Inappropriate Capability

Medium

Confidence: 88% confidence
Finding: The skill instructs the agent to perform live weather lookups using the user's city as part of routine reminders, but this external data-sharing behavior is not clearly disclosed in the manifest or accompanied by a consent step. This creates a privacy and scope-transparency issue because user location data may be sent to third-party services without clear user awareness.

Vague Triggers

Medium

Confidence: 85% confidence
Finding: The trigger list includes very broad everyday phrases such as '帮我看看' and generic plant-status expressions, increasing the chance of accidental invocation in unrelated conversations. Over-broad activation can cause unintended reads/writes to MEMORY.md or user files and may initiate data-handling actions the user did not intend.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill repeatedly instructs the agent to read and write ~/.workbuddy/MEMORY.md plus local archive/log files, yet it does not present a clear upfront warning that user files will be modified or that persistent personal data will be stored. This weakens informed consent and raises privacy/integrity risks, especially because the skill can create and append to files automatically.

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The weather logic requires sending the user's city to external services, but the skill text does not clearly warn the user about this data transfer or obtain explicit consent. Because city/location can be sensitive contextual data, undisclosed transmission creates a privacy concern even if the functionality is relevant to plant reminders.

Static analysis

No suspicious patterns detected.