Security audit

Packaging Generation

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language packaging design helper that writes generated design output files, with no evidence of hidden execution, network access, credential use, or persistence beyond expected file output.

Install this if you want a Chinese-language packaging design generation workflow. Before using file output, confirm where the agent will save files and avoid overwriting existing work; ask the agent to respond in another language if needed.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (11)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The trigger phrases are very broad and include generic packaging-related terms plus the unusual token 'meta-skill-system', increasing the chance the skill activates during ordinary conversation rather than clear user intent. Unintended invocation can cause the agent to enter this skill's workflow, including reading reference files and preparing file output behavior, which expands attack surface and can lead to confusing or unauthorized actions.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill instructs the agent to save generated content as files and later tell the user the file location, but it does not disclose write scope, destination, naming rules, overwrite behavior, or require user confirmation before creating files. In an agent environment, silent or poorly bounded file creation can cause unintended data persistence, overwriting of existing files, or placement of sensitive/generated content in unsafe locations.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown template presents all instructions, task goals, and examples exclusively in Chinese. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a violation when no language choice or regional justification is provided.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 85% confidence
Finding: The entire skill template is written as Chinese-only operational guidance, with no indication that users may choose another language or locale. Under the policy, forcing a specific language without opt-in is a natural-language policy concern unless the locale restriction is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 86% confidence
Finding: The entire template is written as a normative exemplar for task execution and output in Chinese, including output headings and example content, but it does not state that language selection is optional or limited to a China-specific context. This can violate language/locale policy when a skill constrains responses to a single language without user opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The skill content is written entirely in Chinese and frames outputs around Chinese-language reports/code without indicating that the user's language preference should be respected. In a multi-language agent environment, this can cause instruction hijacking of the response language, leading to degraded usability, miscommunication, or policy-relevant content being emitted in a language the user did not request.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: All headings and instructions in this skill reference are presented only in Chinese, and the file does not indicate that the skill is region-specific or that users may choose another language. That creates a natural-language policy concern because it implicitly forces a specific language without user opt-in.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 83% confidence
Finding: This markdown file instructs users to '保存文件' as part of the workflow, which is a user-data-affecting action. Under the markdown-specific warning criterion, the description should disclose file write implications or caution users to verify save location and overwrites, but no such warning appears nearby or elsewhere in the file.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: 该 markdown 文件的全部自然语言指令和示例均固定为中文，但未说明这是面向特定中文场景的区域性模板，也未提供用户可选择语言的选项。按规则，强制单一语言且无用户选择或明确正当化，属于自然语言/地区政策方面的问题。
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 87% confidence
Finding: This markdown exemplar presents all task instructions, goals, and examples exclusively in Chinese. Under the policy criteria, forcing a specific language without user opt-in can constitute a natural-language policy violation when no justification or alternative language option is provided.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The entire skill documentation is written in Chinese and does not indicate that users may choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific context. Under the policy, a language or locale constraint should be opt-in or explicitly justified.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.