Back to skill

Security audit

Miaoji Asin Clinic Pro

Security checks for vulnerabilities and agentic risk

Overview

This skill is a Chinese-language Amazon ASIN planning assistant that stays within strategy/report generation and does not request sensitive access or perform account actions.

Install this if you want Chinese-language ASIN strategy templates and simulated planning output. Treat the results as advisory, since the bundled script appears to use sample data and does not fetch live Amazon or competitor metrics.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Tp4

High
Category
MCP Tool Poisoning
Confidence
90% confidence
Finding

描述与代码部分重合:代码确实围绕五维诊断扩展了竞品对标,并生成长期执行相关的修复优先级和甘特图。但存在明显不一致之处。首先,描述中的核心卖点“90天行动计划”和“季节性优化日历”在代码中没有对应实现;甘特图是短期任务排期,不等同于明确的90天计划,代码里也没有季节性逻辑、月份/节日/旺季日历等功能。其次,代码实际实现了“周报模板生成”和“历史趋势对比”,这是描述中未声明的功能。整体来看,代码与宣称方向相近,但关键宣传功能缺失,且实际能力集与描述不完全一致,因此应判定为不匹配。

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
85% confidence
Finding

This markdown file describes how to use the skill at a high level ('打开技能', then input product data) but does not define any specific invocation phrases, activation scope, or negative examples. Without explicit trigger boundaries, the skill's activation conditions are ambiguous and could lead to unintended invocation in broader contexts.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The file’s natural-language descriptions and user-facing strings are consistently fixed in Chinese, and there is no indication that the user can select another language or that the tool is intentionally restricted to a Chinese-speaking region. Under the policy, forcing a specific language without opt-in is a locale/language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill documentation forces a specific language presentation without offering an opt-in, alternative language, or stating that the skill is intended only for a Chinese-speaking audience. This may violate language/locale policy when users are not given a choice or justification for the locale restriction.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.