Security audit

Skill Price

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed competitor price-monitoring assistant that uses external pricing APIs and local report storage in ways that match its stated business purpose.

Install only if you are comfortable providing a TRADEGPT_API_KEY and sending product, competitor, market, and pricing context to the YunlvAI-related APIs. Configure alerts only to addresses or WhatsApp recipients you control, and review generated pricing recommendations before acting on them.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The activation description is broad enough to match ordinary discussions about pricing, market prices, and strategy rather than a narrowly scoped request for this specific skill. Overbroad routing can invoke the skill in unintended contexts, causing unnecessary access to external APIs, generation of competitor-intelligence workflows, or disclosure/processing of user business data when the user did not clearly request that capability.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The standalone trigger list contains generic terms like '定价策略', '市场价格', '价格分析', and 'competitive pricing', which are common in benign business conversations. This increases the chance of accidental skill activation and unnecessary execution of workflows involving external data sources, report generation, or alerting features beyond the user's intended scope.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The manifest description uses broad 'use when' language tied to generic pricing topics, which can cause the skill to activate for ordinary discussions about prices rather than clearly scoped competitor-intelligence tasks. Overbroad activation increases the chance the agent invokes external data-analysis capabilities unnecessarily, exposing user business context to third-party APIs and creating unintended tool use.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger list contains short, ambiguous phrases such as '市场价格', '价格分析', and 'price monitoring' without contextual boundaries, making false-positive activation likely. In an agent ecosystem, overly broad triggers can route unrelated user conversations into a skill that contacts external services, causing unnecessary data sharing, confusion, or inappropriate pricing advice generation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The entire template is written in Chinese and provides no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking or region-specific workflow. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file is a natural-language reporting template, and all headings and instructions are presented only in Chinese. Under the policy rule for language/locale, a skill should not force a specific language unless it offers user opt-in or clearly documents that the skill is region- or locale-specific.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 85% confidence
Finding: The entire skill file is written only in Chinese and does not offer any language or locale choice to the user. Under the policy, forcing a specific language without opt-in can be a natural-language policy violation unless the locale restriction is clearly documented and justified.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.