Security audit

文件工具箱专业版

Security checks for vulnerabilities and agentic risk

Overview

This file-management skill is mostly purpose-aligned, but it promotes broad scheduled file moves, cleanup, and deduplication on sensitive local folders without enough nearby guardrails.

Review this skill carefully before installing. Use it only on narrow, backed-up folders at first; prefer scan, plan, or preview modes; avoid unattended schedules until you have confirmed exactly what will move or be deleted; and do not enable email, callbacks, or remote team distribution unless you know what metadata or reports will be sent.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Behavioral ASTexec() Call, eval() Call, Dynamic Import
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration

Findings (5)

Intent-Code Divergence

Medium

Confidence: 90% confidence
Finding: The skill claims that all file operations stay local and no file data is uploaded, yet elsewhere it documents callback URLs, email notifications, and remote team distribution. That inconsistency can mislead users into granting trust under false assumptions, especially when the skill has exec capability and may transmit metadata or results off-host.

Intent-Code Divergence

Medium

Confidence: 86% confidence
Finding: The FAQ states the key-document inventory only records metadata and does not read document contents, but the skill description also advertises content extraction and document conversion. This can create unsafe user expectations about what data is accessed, leading to accidental exposure of sensitive documents such as contracts, tax files, or medical records.

Missing User Warnings

Medium

Confidence: 88% confidence
Finding: The skill promotes unattended scheduled organization of Desktop and Downloads paths without an immediate, prominent warning that files may be moved automatically. In a file-management skill with write and exec tools, this increases the chance of unintended data movement, broken workflows, loss of discoverability, or processing of sensitive files without informed consent.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The archive workflow includes review, cleanup, compression, archive, and verify steps, but the examples do not place a strong nearby warning on cleanup and movement effects. Users may treat the workflow as routine documentation and trigger deletion of temporary files or relocation of project data without understanding the consequences.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The dedup execute example is shown without an immediate warning that duplicate handling can remove or alter user data selections. Because the skill targets broad document stores and may operate on sensitive directories, a user could unintentionally lose needed copies, context, filenames, or directory placement.

Static analysis

No suspicious patterns detected.