T09 · Insecure Skill Coding Practices
Warning
- Location
references/evidence-collection.md:63- Finding
Unprotected Plaintext Storage of Sensitive Consumer Evidence
- Content
View full analysis
- Remediation
View remediation
Security audit
jd-lawsuit-skill
Security checks for vulnerabilities and agentic risk
Overview
The skill has a coherent consumer-dispute purpose, but it collects and stores sensitive order, payment, logistics, chat, invoice, and legal-document data without enough privacy controls.
Review this skill carefully before installing. It may work for Chinese e-commerce consumer disputes, but only use it if you are comfortable letting an agent view logged-in order pages and create local evidence files. Redact addresses, phone numbers, IDs, tracking numbers, payment details, and unrelated chat content where possible, choose a private storage location, and delete the evidence bundle when it is no longer needed.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (11)
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The guide tells users to upload evidence to the 12315 platform but does not warn them to minimize or redact sensitive personal data before submission. In a consumer-rights workflow, evidence often includes names, phone numbers, addresses, order IDs, and payment details, so omission of privacy guidance can lead to unnecessary exposure of personal information.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
The 黑猫投诉 section encourages users to submit complaint text and screenshots without clearly warning that complaints are public-facing. Because this channel is specifically used for public pressure, users may unintentionally publish sensitive personal, transaction, or dispute details that can be indexed, copied, or misused by third parties.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The document instructs collection of highly sensitive consumer-dispute evidence, including order numbers, payment details, logistics records, chat logs, invoices, and seller identity data, but provides no minimization, consent, masking, retention, or access-control guidance. In this skill context, the data is directly tied to real individuals and transactions, so omission of privacy handling increases the risk of unnecessary exposure or misuse during evidence gathering.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The file prescribes saving screenshots, PDFs, and a structured raw-data.json under a predictable local directory, consolidating order, logistics, payment, and identity-related evidence without any warning about encryption, file permissions, or cleanup. In a legal-dispute workflow this centralizes sensitive material in an easily discoverable location, increasing the chance of local compromise, accidental sharing, or later unauthorized reuse.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The file is entirely framed as Chinese legal-document generation and explicitly states that all document output will be produced in Markdown, with the templates themselves fixed in Chinese. There is no indication that users may choose another language or that the Chinese-only constraint is an explicit opt-in or justified locale restriction.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The file recommends collecting customer-service chat records and merchant/operator identity information as evidence, but it does so without any handling guidance for personal data contained in those materials. Chat logs and business registration pages can include phone numbers, addresses, account identifiers, and other sensitive or legally regulated information, so the lack of privacy boundaries increases the chance of unnecessary collection and disclosure.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The guidance explicitly tells the workflow to read user-saved screenshots from a directory, but it provides no warning to minimize personal data, obtain explicit consent, or avoid collecting unrelated sensitive content visible in screenshots. In a consumer-dispute skill, screenshots commonly contain names, phone numbers, addresses, order IDs, and chat history, so this omission creates a realistic privacy and over-collection risk.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 78% confidence
- Finding
The file presents all instructions exclusively in Chinese and implicitly assumes a single language/locale, with no opt-in or alternative language option. Under the stated policy, forcing a specific language without user choice can be considered a natural-language policy violation unless clearly justified as region-specific.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 81% confidence
- Finding
The entire skill file is presented exclusively in Chinese, which can amount to a language policy constraint if users are not given an explicit language or locale option. The document does not state that it is limited to a Chinese-speaking or region-specific workflow, nor does it offer alternative language support.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
This markdown file contains user-facing natural-language content only in Chinese, and there is no indication that users may choose another language or that the Chinese-only scope is a justified regional constraint. Under the language/locale policy check, forcing a single language without opt-in can be a policy concern.
- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The template instructs the system to save generated legal documents into a specific local directory under the user's home folder without clearly requiring explicit user awareness or consent at the point of write. In an automation skill that may process sensitive personal and dispute data, silent local persistence can expose private information or create unexpected artifacts on shared devices.
- Content
Static analysis
No suspicious patterns detected.