Security audit

Miaoji Scene Studio Pro

Security checks for vulnerabilities and agentic risk

Overview

This is a read-only visual strategy skill with some documentation quality issues, but I found no hidden access, persistence, exfiltration, or destructive behavior.

Install only if Chinese-language ecommerce visual-planning guidance fits your workflow. Treat benchmark and competitor-analysis outputs as planning templates unless you provide real marketplace evidence, and review demographic/model defaults before using generated creative briefs.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 85% confidence
Finding: The implementation partially matches the description: it does provide A/B testing plans and platform adaptation/spec guidance, and it includes a kind of brand/visual consistency evaluation. However, two prominent declared capabilities are missing: there is no seasonal scene library and no analysis of visual differences against similar/competing products. Instead, the code adds brand consistency scoring and generic scene prompt generation, which are related but not equivalent to competitor visual gap analysis. Therefore the description overstates the implemented functionality enough to count as a mismatch.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 86% confidence
Finding: The entire skill description and usage instructions are written only in Chinese, with no indication that other languages are supported or that the Chinese-only constraint is intentional and justified. Under the policy rule, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The manifest description and the entire skill documentation are written exclusively in Chinese, and there is no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking region. Under the language/locale policy, a skill should not impose a language without user opt-in unless the locale restriction is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This file contains user-facing documentation and CLI output primarily in Chinese, while also hard-coding English generation terms such as style keywords and prompt fragments later in the file. Because the skill does not offer user opt-in for language/locale or explain that it is intentionally region-specific, it risks violating language/locale policy expectations.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This line forces a specific demographic attribute in generated content regardless of user preference or market context. Under the policy scope here, this is a natural-language constraint tied to locale/cultural assumptions that is neither optional nor justified in the skill description.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The user-facing display name, description, and author fields are entirely in Chinese, and the manifest does not indicate that language selection is optional or that the skill is intended only for a Chinese-speaking or region-specific audience. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.