Security audit

Wahoo

Security checks for vulnerabilities and agentic risk

Overview

This skill is a screenwriting helper with no executable code or sensitive system access, though its activation phrases and language expectations are loose.

Install this if you want a Chinese-heavy screenwriting and story-development assistant. Be aware that broad prompts like 'I have an idea' may activate it unexpectedly, and ask explicitly for your preferred language if needed.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (11)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The trigger phrases are extremely generic (e.g. 'I have an idea' and 'Help me perfect this story'), which can cause the skill to activate during ordinary conversation rather than only when the user explicitly wants this screenplay workflow. Over-broad activation increases prompt-scope hijacking risk because the skill may inject its long, opinionated instructions into unrelated sessions and override more appropriate agent behavior.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: This markdown file presents all instructional content in Chinese, beginning with the title and continuing throughout, but does not indicate that the skill is Chinese-only or provide any user language/locale choice. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The entire skill file is written in Chinese, including the title, instructions, process steps, and evaluation checklist, with no indication that the user may choose another language. Under the policy, a skill that effectively enforces a specific language without opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The file is entirely in Chinese and does not offer a language-selection mechanism or state a justified locale restriction. In a general-purpose skill, this can prevent reviewers or users from understanding behavioral instructions, reduce transparency, and allow unsafe or policy-relevant guidance to evade effective scrutiny due to language mismatch.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The file is entirely written as a prescriptive methodology in Chinese and does not indicate that language selection is optional or user-configurable. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 74% confidence
Finding: The file includes both English and Chinese content, such as Chinese keywords and section text, but does not tell users whether output language will follow user preference or whether the mixed-language behavior is intentional. This can create a language/locale policy issue if the skill implicitly steers users into a specific language experience without opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The manifest description is written entirely in Chinese and presents the skill as a fixed Chinese-language experience, with no indication that users can choose another language or locale. This can violate language/locale policy expectations when a skill imposes a language without opt-in or documented regional scope.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: This markdown file presents all instructions, labels, and examples in Chinese, and does not indicate that the user can choose another language. Under the language/locale policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is clearly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file presents all instructional content in Chinese, and there is no indication that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file is entirely written in Chinese and presents the guidance as the default format without any indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is explicit and justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 80% confidence
Finding: The entire skill content is written in Chinese and does not indicate that users may choose another language or that the language restriction is required for a region-specific purpose. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.