Incomplete referenced artifact analysis
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md 版式基线看 `assets/style-reference.png`（本期 10 张的总览），出图后要和它一致：同一套纸色、朱红/墨绿、微软雅黑、页码与进度点。
Security audit
小红书判断推理每日5题图文
Security checks for vulnerabilities and agentic risk
Overview
The skill creates local exam-study cards and draft social posts through disclosed, purpose-aligned behavior.
Use a dedicated project folder, provide Python/Pillow and Chinese fonts, and check the output location before rendering. Reruns replace matching generated images. Verify question sources and answers before manually publishing. The scanner's reference-image gap was investigated; runtime dependencies and live source accuracy were not tested.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)