Security audit

视频生成提示词优化

Security checks for vulnerabilities and agentic risk

Overview

This skill is a localized prompt-writing assistant for AI video prompts and does not request tools, credentials, network access, or persistent privileges.

Install this if you want a Chinese-guided assistant for building English AI video-generation prompts. Be aware that it may activate for broad video-prompt wording and may not adapt well to users who expect all output in another language.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (13)

Vague Triggers

High

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The activation description uses a long list of broad trigger phrases plus catch-all wording such as '含义相近的词汇' and '描述过于简单或模糊时引用', which makes invocation boundaries ambiguous. This can cause the skill to hijack unrelated conversations, override a better-matched skill, or activate on benign requests that merely resemble prompt-writing, reducing routing integrity and making downstream behavior less predictable.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill mandates a Chinese introductory section and fixed Chinese follow-up prompts regardless of the user's language. This can create language-confusion failures, leak unintended content transformations, and degrade safety/comprehension for users interacting in other languages, especially when precise prompt wording matters.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The template instructs users to compose prompts in English (for example, 'A [景别] of...' and other English phrase blocks) even though the surrounding guidance is in Chinese. This imposes a specific output language without documenting a user choice or opt-in, which matches the language/locale policy violation criteria.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The file’s title, section headings, placeholders, and guided questions are all written in Chinese, which implies the skill is intended to operate in a fixed language. Under the policy, locale or language constraints should either be optional, user-selectable, or clearly justified as region-specific; no such opt-in or justification appears here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The entire template, headings, and guided questions are presented in Chinese, while the file does not state that the skill is region-specific or offer a language choice. Per the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Vague Triggers

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The default prompt activates when the user 'wants to write or improve a video generation prompt,' which is broad and does not define clearer boundaries or exclusions for when this skill should be invoked. While domain-related, the invocation description lacks negative examples or tighter constraints, increasing the chance of unintended triggering for ordinary prompt-help requests.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This markdown file presents all instructions and descriptions in a single forced language context. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is clearly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The entire skill document is written in Chinese and does not indicate that users may choose another language or that the locale restriction is intentional and justified. Under the language/locale policy rule, forcing a specific language without opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file presents the skill primarily in Chinese, but the actual prompt template and full example are fixed in English. That can amount to a language-policy issue if users are expected to use a specific language without explicit opt-in or an offered alternative.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 87% confidence
Finding: This markdown skill uses Chinese headings and guidance throughout, which can amount to a language-policy issue if the organization expects skills not to force a specific language without user opt-in. There is no indication that users may choose another language or that the template is intentionally restricted to a Chinese-speaking context.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 81% confidence
Finding: This markdown skill presents all instructions, headings, and guidance only in Chinese, with no note that other languages are supported or that Chinese is optional. Under the language/locale policy rule, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This markdown file uses Chinese throughout headings and guidance, which effectively forces a specific language for users of the skill. The policy allows locale constraints only when users are given a choice or the restriction is clearly documented and justified, neither of which appears here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The entire template, headings, and guided questions are presented in Chinese, with no indication that users may choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the policy, forcing a specific language without opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.