Security audit

movie-therapy

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language movie recommendation skill for emotional support, with no executable code, persistence, credential access, or hidden data flows.

Install this only if you want a Chinese-language emotional-support movie and TV recommendation skill. It should not be treated as medical, psychiatric, or crisis care; users in urgent distress should use emergency or professional support resources rather than relying on recommendations.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (5)

Natural-Language Policy Violations

Medium

Confidence: 85% confidence
Finding: The file presents all safety instructions, crisis triggers, and help pathways exclusively in Chinese. This can be a language/locale policy issue if the broader skill is expected to serve users without prior Chinese-language opt-in, because no alternative language option or justification for the locale restriction is stated here.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The file gives mental-health-oriented recommendations for issues like depression, anxiety, insomnia, and grief, but it does not warn users that the content is not professional medical, psychiatric, or crisis support. Users in distress could over-rely on entertainment recommendations instead of seeking timely help, especially for severe symptoms or self-harm-adjacent contexts.

Natural-Language Policy Violations

Medium

Confidence: 90% confidence
Finding: This taxonomy forces a specific language for skill behavior and maintenance instructions, which can violate language/locale policy when users or operators have not opted into Chinese. The file does not indicate that the skill is region-specific or that alternative language support is available.

Natural-Language Policy Violations

Low

Confidence: 86% confidence
Finding: The display name and full skill description are written only in Chinese, with no indication that users can choose another language or locale. This can be a natural-language policy issue when a skill implicitly constrains interaction to a specific language without explicit opt-in or justification.

Natural-Language Policy Violations

Low

Confidence: 77% confidence
Finding: All user-facing natural-language content in this file is Chinese, and the document does not say that the skill is intended only for Chinese-speaking users or offer any language-selection option. Under the language/locale policy, forcing a single language without opt-in can be a policy concern unless the scope is explicitly documented and justified.

Static analysis

No suspicious patterns detected.