Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward ISO image creation guide whose file, mount, and image-modification commands match its stated purpose.
Install this only if you want an agent to help with ISO image creation and related command examples. Review output paths before running commands, prefer a test directory, and use read-only mounts unless you intentionally need to modify an image.
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
# 从 ISO 删除文件
# Delete file from ISO
xorriso -indev input.iso -outdev output.iso \
-rm /path/to/file
# 转换 ISO 格式
# Convert ISO format
The skill includes numerous commands that create or overwrite ISO files, modify image contents, and mount filesystems, but it does not warn users about side effects such as overwriting existing files, changing local data, or requiring elevated privileges for mount operations. In an agent setting, these examples could be copied or adapted automatically and cause unintended local filesystem changes or destructive writes without explicit user confirmation.
The file consistently presents content in Chinese and English together, which may be acceptable, but it does not explicitly offer a user language choice or state whether bilingual output is optional. Under the stated policy, language behavior should either be user-selectable or clearly justified.
No suspicious patterns detected.