Security audit

中国活动预算逐项DD

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent budget-review assistant with no executable code, persistence, or hidden data-transfer behavior found.

Install only if you are comfortable giving the assistant event budgets, quotes, and related project attachments. Avoid sharing confidential client, supplier, pricing, or personal data beyond what is needed, and follow the skill's own guidance to desensitize anything reused externally.

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 88% confidence
Finding: The default prompt hard-codes an invocation phrase that closely resembles an ordinary user request to review an event budget. This can cause unintended triggering or routing of general budget-review requests into the skill, which may confuse users, bypass clearer consent boundaries, or apply specialized negotiation guidance when the user did not explicitly request it.

Static analysis

No suspicious patterns detected.