Security audit

Vietnam Realestate

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Vietnam real-estate research helper with a simple local calculator and no evidence of hidden access, persistence, or destructive behavior.

Before installing, treat the skill as an informational research aid, not legal or financial advice. It should be used with current web verification and professional review for real transactions; the included calculator is only an estimate.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 98% confidence
Finding: Mô tả khai báo một skill tra cứu và phân tích bất động sản rất rộng, dựa trên dữ liệu thị trường và pháp lý. Tuy nhiên code chỉ thực hiện các phép tính định sẵn về thuế TNCN, lệ phí trước bạ, phí công chứng, chi phí mua và ROI đầu tư từ đầu vào người dùng. Đây không phải chi tiết hỗ trợ cho chức năng tra cứu đã mô tả mà là một mục đích chính khác, hẹp hơn nhiều. Không thấy truy cập mạng, đọc dữ liệu ngoài, xử lý quy hoạch/pháp lý, hay bất kỳ logic tra cứu giá theo khu vực nào. Vì vậy mô tả không phản ánh chính xác hành vi thực tế của code.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The activation description is extremely broad, covering nearly any Vietnam real-estate-related query, which can cause the skill to trigger in many contexts where it may be incomplete, inaccurate, or inappropriate. In an agent setting, overbroad routing increases the chance of unintended tool use, unnecessary web access, and the delivery of misleading legal or financial guidance under the skill's authority.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The entire skill reference is written only in Vietnamese and presents Vietnamese search queries and guidance throughout, but it does not state that the skill is intentionally limited to Vietnamese-speaking users or Vietnam-specific workflows. Under the policy, forcing a specific language without user opt-in or documented justification is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: This code file contains user-facing natural-language instructions and output labels exclusively in Vietnamese, including the module docstring and usage guidance. Under the policy rule, forcing a specific language without user opt-in is a locale/language policy violation unless the restriction is explicitly justified, which is not stated here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The document is written entirely in Vietnamese and presents the guidance as the default interaction format, with no indication that users may choose another language. Under the stated policy, a skill that imposes a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.