T08 · Insecure Dependencies
Warning
- Location
SKILL.md:50- Finding
Unpinned Third-Party Package Execution Through npx
- Content
View full analysis
- Remediation
View remediation
Security audit
Frontend Performance
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward frontend performance guidance skill, with one caution around an unpinned optional analyzer command.
Before following the bundle-analysis command, prefer a project-local, pinned analyzer dependency from your lockfile or a sandboxed environment without sensitive credentials. The skill otherwise reads as normal frontend performance advice.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The skill name, description, and usage instructions are written entirely in Chinese, and the usage line instructs the skill to output a report without indicating that users may choose another language. This can be a language/locale policy issue if the organization requires offering language choice rather than implicitly forcing one language.
- Content
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 91% confidence
- Finding
The skill instructs users to execute
npx @next/bundle-analyzerwithout pinning a specific version. This creates a supply-chain risk becausenpxmay fetch the latest package at runtime, and a compromised or maliciously updated package could lead to unexpected code execution on the user's machine. In this context the command is directly presented as a recommended diagnostic step, which makes the issue more dangerous than a passive mention.- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The name, tagline, and description are entirely in Chinese, with no indication that users can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Per the policy, forcing a specific language without opt-in is a natural-language policy violation.
- Content
Vague Triggers
Low
- Category
- Not specified by scanner
- Confidence
- 77% confidence
- Finding
The activation description includes generic phrases such as “性能优化” and “页面卡顿”, which can arise in ordinary discussion and may match requests outside the intended scope of this skill. The README does not provide negative examples or boundaries clarifying when the skill should not activate.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 84% confidence
- Finding
The manifest description and section headings prominently prescribe Chinese trigger phrases and present the skill primarily in Chinese, but do not state that other languages are equally supported or offer a locale choice. This can conflict with a language/locale policy requiring opt-in rather than implicitly steering users toward one language.
- Content
Static analysis
No suspicious patterns detected.