Security audit

activity-planner

Security checks for vulnerabilities and agentic risk

Overview

This event-planning skill is coherent and mostly low-risk, but users should handle attendee/contact data and generated file output deliberately.

Before installing, treat this as a planning/report-generation skill. Confirm where the HTML file will be written, avoid overwriting important files, and add your own privacy safeguards for attendee photos, contact details, QR lead forms, invitations, reminders, surveys, and marketing follow-up. Do not rely on the artifact's self-stated security-audit badge as proof of policy approval.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (10)

Vague Triggers

Medium

Confidence: 86% confidence
Finding: The trigger list includes broad, common phrases such as 'event planning', 'marketing campaign', and generic Chinese requests like '帮我策划活动', which can cause the skill to activate in situations where the user did not explicitly intend to invoke it. Unintended activation can lead to confusing behavior, over-collection of user inputs, and downstream actions such as generating and preparing to save files without sufficiently explicit consent.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill instructs the agent to save an HTML file directly to the user's current working directory, which is a filesystem side effect, but it does not require an explicit user confirmation or provide a warning that a file will be created. In the context of an easily triggered planning skill, this increases the risk of unexpected file creation, clutter, overwriting confusion, or unsafe writes in sensitive working directories.

Missing User Warnings

Medium

Confidence: 87% confidence
Finding: The skill advises collecting participants' concerns and distributing event notes, which implies gathering and sharing personal or attributable information without mentioning notice, consent, minimization, or retention controls. In an event-planning context, this can lead users to process attendee data in a non-compliant way, causing privacy violations, unauthorized disclosure, or regulatory exposure.

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: Recommending event photography without any consent or notice guidance can result in capturing and using attendees' images without permission. For salon/community events, photos may reveal attendance, identity, or associations, creating privacy, reputational, and legal risks if later shared externally.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: Suggesting QR-code lead capture without addressing consent, disclosure, or secure handling encourages collection of personal data with no safeguards. In a marketing/event skill, this is especially relevant because operators may gather names, phone numbers, or business details at scale and then use them for follow-up, increasing compliance and misuse risk.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The document explicitly tracks lead/contact collection metrics ('留资数', CRM/form statistics) and arrival/attendance data, but provides no guidance on consent, lawful basis, minimization, retention, or secure handling of personal data. In an event-planning skill, this can normalize collecting and operationalizing personal contact data for marketing without privacy safeguards, increasing compliance and misuse risk.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The instruction to call absent attendees directs proactive outreach based on attendance status, which involves processing personal contact information and potentially sensitive participation data, yet it gives no warning about consent or privacy implications. In practice, this could lead users to contact individuals who did not agree to follow-up, creating privacy, compliance, and harassment risks.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The invitation templates instruct staff to send event details to attendees via WeChat or email and imply collection/use of contact details without any privacy notice, consent language, or explanation of how personal data will be used. In an event-planning skill, this can normalize outreach and attendee tracking workflows that process personal information without transparency, increasing privacy/compliance risk.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The script tells attendees to scan a QR code to 'leave information' for benefits or a prize draw, but does not disclose that personal data may be collected for later marketing or follow-up. Because this skill is specifically designed for event promotion and lead generation, the omission is more dangerous: operators may deploy the exact wording at scale and collect leads without meaningful notice or consent.

Missing User Warnings

Low

Confidence: 90% confidence
Finding: The satisfaction survey script offers a reward for responses but gives no notice that feedback and identifiers may be stored, analyzed, or tied to future outreach. This is a real but lower-severity privacy issue because the data appears less sensitive, yet incentives can pressure users into sharing information without understanding downstream use.

Static analysis

No suspicious patterns detected.