Back to skill

Security audit

title

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Xiaohongshu title-writing helper with no hidden execution, data access, persistence, or privileged behavior.

Install this if you want Chinese Xiaohongshu/RedNote-style title suggestions optimized for engagement. Be aware it intentionally uses platform-specific persuasive wording, emojis, urgency, and compliance filters, so it may be unsuitable for neutral, multilingual, or non-marketing writing unless invoked deliberately.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The skill hard-codes a Chinese-platform optimization style ('native, emotional', emoji requirements, anti-'AI-speak' filtering) without checking the user’s language, platform, or consent. This can override user preferences and produce manipulative or non-compliant outputs in the wrong context, especially if the skill is auto-invoked due to the broad trigger.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The trigger condition accepts essentially any raw text or topic, making the skill likely to activate on ordinary user requests that were not intended for title-generation. Overbroad activation can cause prompt hijacking of unrelated conversations, unwanted style transformation, and accidental application of the skill’s persuasive-output behavior outside its intended scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The file presents all example categories, inputs, and preferred outputs exclusively in Chinese, which implies the skill behavior is oriented toward a single language. There is no indication that users can opt into this locale or that the skill is intentionally limited to a Chinese-language context.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
78% confidence
Finding

The docstring states the validator filters titles based on 'Xiaohongshu algorithm preferences', and the hard-coded banned terms and engagement rules are tailored to a Chinese-language content environment. This imposes a locale/language-specific policy in the skill logic without indicating user choice or explaining that the skill is intended only for that region/platform context.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.