UAPI 获取Gravatar头像 接口

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 12:37 PM UTC
• Version: 1.0.0

Overview

This skill is a narrow Gravatar avatar lookup helper with no executable code, persistence, or hidden behavior, though users should be aware that email-based lookups send an email identifier to an external API.

Install only if you want an agent helper for UAPI Gravatar lookups. Prefer using the MD5 hash parameter when possible, and avoid submitting someone else's raw email address unless sharing that identifier with the external avatar API is appropriate.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The trigger list includes the standalone keyword "gravatar," which is broad enough to match loosely related requests and may cause this skill to be selected when the user did not specifically intend a UAPI avatar lookup. In this skill's context the impact is limited because it only routes to a single read-oriented endpoint, but unintended invocation can still lead to incorrect tool use or unnecessary external requests.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The API accepts a raw email address and forwards it to an avatar lookup flow, but the documentation does not warn that submitting an email exposes personal data to an external avatar service and may enable correlation of a user's identity. In this skill context, users may provide third-party email addresses for avatar lookup, so missing privacy guidance increases the risk of unintended disclosure and non-compliant data handling.

Natural-Language Policy Violations

Medium

• Confidence: 86% confidence
• Finding: The document is primarily written in Chinese and presents Chinese instructions as the default interaction mode, while only a small keyword/example section includes English phrases. This creates a natural-language policy concern because it imposes a language preference without explicitly offering the user a choice or documenting a justified locale restriction.

Natural-Language Policy Violations

Low

• Confidence: 79% confidence
• Finding: The skill content is primarily written in Chinese while also targeting English trigger phrases, but it does not state that language is optional or that responses can follow the user's preferred language. This can create a locale/language policy issue if the skill implicitly constrains use or interaction to a specific language without opt-in.

Natural-Language Policy Violations

Low

• Confidence: 89% confidence
• Finding: All user-facing instructions in this skill file are presented in Chinese, and the document does not indicate that language selection is optional or that the skill is intentionally limited to a Chinese-speaking context. The policy requires avoiding forced language or locale constraints unless the choice is offered or clearly justified.

Static analysis

No suspicious patterns detected.