Back to skill

Security audit

Tob Poc War Room

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local POC planning/report generator with visible Chinese-language UX and no evidence of hidden access, persistence, data exfiltration, or destructive behavior.

Install this if you want a Chinese-oriented ToB POC triage and action-plan helper. Be aware that the CLI/report language is mostly Chinese and that it provides sales/project guidance, not automatic customer outreach or contract execution.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

This code file contains natural-language strings and documentation entirely in Chinese, describing the skill's inputs and outputs only in that language. Because the skill does not offer an explicit language or locale choice, it effectively imposes a specific language on users, which matches the language/locale policy violation criteria.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The user-facing console banner and prompts in interactive mode are all hard-coded in Chinese, so users are required to interact in that language. There is no mechanism to choose another language or confirm Chinese as the desired locale before proceeding.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
81% confidence
Finding

The skill name is presented as POC战情室, indicating a fixed Chinese locale presentation, but the file does not offer any user opt-in or language choice. Under the policy for natural-language constraints, forcing a specific language or locale without opt-in can be a policy violation unless clearly justified as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
92% confidence
Finding

The manifest description is entirely in Chinese and instructs the user to provide inputs in that language/context, with no indication that other languages are supported or that language choice is optional. This can violate language/locale policy when a skill implicitly requires a specific language without explicit user opt-in or documented justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

The command help text and parameter descriptions are presented only in Chinese, which enforces a single language for operational use. The file does not document a justified region-specific limitation or provide bilingual/multilingual help text.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

This test file asserts report content in Chinese strings such as '当前通过率:93%' and '客户沉默:7 天', while also expecting English output like 'Within 48h'. That implies the skill may enforce specific language/locale output behavior without offering a user language choice, which matches the policy concern for language or locale constraints.

Content

No source excerpt is available for this finding.