Security audit

Poster Generation

Security checks for vulnerabilities and agentic risk

Overview

This is a poster-generation skill whose file output behavior is disclosed and aligned with its purpose, with no evidence of hidden execution, credential use, network access, or persistence beyond generated files.

Before installing, note that this skill is written for Chinese-language poster workflows and may create local output files. Review the suggested filename and save location when using it, especially if generated content is sensitive or should not persist on disk.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (10)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The trigger list contains very broad phrases such as '生成海报/创建海报/图片海报/广告海报/宣传海报' and even 'meta-skill-system', which can match many ordinary user requests and may cause this skill to activate unexpectedly. Because the skill also instructs downstream file output behavior, over-broad activation increases the chance that users are routed into unintended content generation or file-creation flows without clear consent.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill explicitly states that generated content will be saved as files and later references notifying the user of file location, but it does not clearly warn users up front that file creation will occur. In agent environments, silent or implicit file creation can lead to unexpected writes, overwriting artifacts, or persistence of sensitive/generated content without informed user approval.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This markdown file presents all user-facing instructions and task descriptions exclusively in Chinese. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly justified, which is not present here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The title and the entire instruction set are written as normative requirements in Chinese, indicating the skill is intended to operate in a fixed language. Under the policy, forcing a specific language without explicit user choice or documented justification is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: This markdown file presents all user-facing instructions in Chinese and does not indicate that the skill is region-specific or that users may choose another language. Under the policy, forcing a specific language without opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 87% confidence
Finding: This markdown file contains user-facing natural-language instructions and examples entirely in Chinese, but it does not indicate that the skill is region-specific or provide any opt-in for language selection. Under the policy rule, forcing a specific language without user choice can be a locale-policy issue.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 82% confidence
Finding: This markdown template presents all task instructions and examples exclusively in Chinese, with no note that the language is optional or tailored to a Chinese-speaking audience. Under the language/locale policy rule, forcing a specific language without user opt-in can be a policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The entire template is written as a Chinese-only exemplar and does not indicate that users may choose another language or locale. Under the policy rule for natural-language violations, forcing a specific language without opt-in can be a locale-policy issue when no justification or alternative is provided.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This markdown template consistently instructs and exemplifies outputs only in Chinese. Under the policy rule for language or locale constraints, forcing a specific language without user opt-in can be a natural-language policy violation when no explicit justification or alternative is provided.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 87% confidence
Finding: This markdown file instructs the skill to determine a file save path and perform file writing in the output-saving section. There is no accompanying warning that the skill may create or save files on the user's system, which is a behavior that can affect user data or system state.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.