Security audit
Security checks for vulnerabilities and agentic risk
This is a mostly coherent form-management skill, but it asks agents to perform broad API and destructive data operations with unclear activation scope and inconsistent free-tier limits.
Install only if you intend to let the agent manage this specific online form service. Before using it, require the agent to ask for confirmation before publishing, updating, deleting forms, deleting submissions, exporting data, or sending collected personal information to the API; also verify which free-tier operations are actually supported.
The skill advertises full lifecycle management including deletion near the top-level capability description, but does not pair that with an equally prominent warning that deletion is destructive and irreversible. In an agent context, this raises the risk of accidental data loss because destructive actions appear as routine operations.
The skill claims certain operation modes in its instruction sections that conflict with earlier free-tier limitations. This can mislead an agent or user into attempting unsupported or higher-risk actions, increasing the chance of unexpected behavior, failed operations, or use of privileged paths not intended for the free edition.
The inline documentation says config and output parameters support import/export-style operations despite later sections stating those features are unavailable in the free version. Contradictory capability guidance is dangerous because agents may invoke data-moving or integration behaviors that bypass expected restrictions or cause accidental disclosure/destructive actions.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# 1. 获取项目ID
curl -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
"https://api.web-notepad.example/v1/projects" | jq '.data[] | {projectId, name}'
# ...
# 2. 创建联系表单
curl -X POST -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# 1. 获取项目ID
curl -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
"https://api.web-notepad.example/v1/projects" | jq '.data[] | {projectId, name}'
# ...
# 2. 创建联系表单
curl -X POST -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# 1. 获取项目ID
curl -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
"https://api.web-notepad.example/v1/projects" | jq '.data[] | {projectId, name}'
# ...
# 2. 创建联系表单
curl -X POST -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# 1. 获取项目ID
curl -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
"https://api.web-notepad.example/v1/projects" | jq '.data[] | {projectId, name}'
# ...
# 2. 创建联系表单
curl -X POST -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# 1. 获取项目ID
curl -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
"https://api.web-notepad.example/v1/projects" | jq '.data[] | {projectId, name}'
# ...
# 2. 创建联系表单
curl -X POST -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# 1. 获取项目ID
curl -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
"https://api.web-notepad.example/v1/projects" | jq '.data[] | {projectId, name}'
# ...
# 2. 创建联系表单
curl -X POST -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# 1. 获取项目ID
curl -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
"https://api.web-notepad.example/v1/projects" | jq '.data[] | {projectId, name}'
# ...
# 2. 创建联系表单
curl -X POST -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"https://api.web-notepad.example/v1/projects" | jq '.data[] | {projectId, name}'
# ...
# 2. 创建联系表单
curl -X POST -H "Authorization: Bearer $WEB_NOTEPAD_API_KEY" \
-H "Content-Type: application/json" \
"https://api.web-notepad.example/v1/forms" \
-d '{
The trigger condition is broad enough to activate on generic API integration or system connection requests, which may cause the skill to run outside its intended scope. Overbroad activation increases the likelihood of unintended external API calls, credential use, or destructive form operations when a narrower tool would be safer.
The visible skill name, summary, descriptions, headings, examples, and user-facing guidance are entirely presented in Chinese, with no indication that users may choose another language or that the skill is intended only for a Chinese-speaking audience. This can violate language-choice policy when locale restriction is not made explicit or optional.