T08 · Insecure Dependencies
Warning
- Location
_meta.json:7- Finding
Unpinned Third-Party Dependency Allows Mutable Installation Behavior
- Content
View full analysis
- Remediation
View remediation
Security audit
Sys Health Pro
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward local system health monitor with minor scoping and dependency hygiene issues, but no hidden, destructive, persistent, or exfiltrating behavior was found.
Install this if you want a Chinese-language local system status tool. Be aware it reports host resource details, including top process names in reports, and the package should ideally pin psutil before use in sensitive or production environments.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The trigger phrase "健康检查" is very broad and can match many user requests unrelated to system monitoring, such as medical or general wellness checkups. Overly broad activation phrases can cause the wrong skill to be invoked, leading to confusing behavior or unintended access to host-level monitoring actions in contexts the user did not intend.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
This code presents its user-facing title, status output, alerts, and command help primarily in Chinese, while providing no option to select another language or any statement that the tool is intentionally limited to a Chinese-speaking context. That creates a natural-language locale policy concern because the skill implicitly forces a specific language without user opt-in.
- Content
Vague Triggers
Low
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
The trigger list is short and lacks scope constraints, exclusions, or examples of when the skill should not activate. This increases the chance of accidental invocation from generic monitoring or health-related requests, which is especially relevant because the skill appears to operate on local system state and could expose status details or run monitoring commands without clear user intent.
- Content