Security audit

Cnc Quote Skill

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a legitimate CNC quoting skill, but it needs review because it combines file access, external channels, and historical quote data with unclear data-handling and installation-source details.

Before installing, confirm the canonical publisher and repository, prefer a pinned release or verified package, and check exactly which files the skill can read or write. Do not feed proprietary drawings, customer contacts, quote history, or pricing data into QQ/email/API/DashScope integrations until retention, self-learning, and opt-out controls are clear.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:31
Finding: Unpinned and Inconsistent External Installation Sources
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The skill advertises QQ Bot, Email, and API integration plus self-learning from historical quotes, but the documentation gives no notice about what customer/order data may be transmitted, retained, or reused for model improvement. In a quoting workflow, order dimensions, materials, pricing, customer contacts, and potentially proprietary manufacturing requirements can be sensitive business information; lack of disclosure increases the risk of unintended data exposure and non-compliant handling.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: This markdown file contains user-facing instructions exclusively in Chinese, including the title, section headings, and explanatory text. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation when no alternative language option or justification is provided.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The file name and title indicate an English-specific publication variant, but the content does not state that language is optional or explain why English is required. Under the policy, forcing or assuming a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.