Back to skill

Security audit

Tob Competitor Snip

Security checks for vulnerabilities and agentic risk

Overview

This is a small local CLI skill that generates Chinese ToB competitor-response sales cards and does not show hidden data access, persistence, or network behavior.

Install only if a Chinese-language ToB sales competitor-response generator fits your workflow. Review generated claims and example talk tracks before using them with customers, since the skill uses embedded generic/sanitized experience rules and does not verify facts about a real competitor.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The file’s user-facing title, description, instructions, and example outputs are all presented in Chinese, which effectively forces a specific language for interaction. The skill does not offer an opt-in choice of language or explain that it is intentionally limited to a Chinese-speaking or region-specific audience.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The help text, prompts, and generated output are all hard-coded in Chinese, and the skill does not provide any user opt-in or alternative locale. Under the policy, forcing a specific language without user choice is a natural-language policy violation unless clearly justified as region-specific, which is not documented here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

The manifest description is written as a Chinese-only instruction and describes the skill's input/output behavior entirely in Chinese, with no indication that users can choose another language or locale. This can violate language/locale policy expectations when a skill implicitly forces a specific language without opt-in.

Content

No source excerpt is available for this finding.