Back to skill

Security audit

lofter-fic-writer

Security checks for vulnerabilities and agentic risk

Overview

This is a text-only LOFTER fanfiction writing skill with no code execution, network access, persistence, credential use, or destructive behavior.

Install this if you want a Chinese LOFTER-style fandom writing workflow and are comfortable with bundled fanfiction samples influencing tone and structure. Review generated content for fandom appropriateness, rating boundaries, and sensitive tropes before posting.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (10)

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 1)May include surrounding context.

md
# Title Patterns

Use these title families when stronger click-through is needed.

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/blast-article-anatomy.md (reported line 1)May include surrounding context.

md
# Title Patterns

Use these title families when stronger click-through is needed.

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/sample-index.md (reported line 1)May include surrounding context.

md
# Title Patterns

Use these title families when stronger click-through is needed.

Hidden Instructions

High
Category
Prompt Injection
Confidence
60% confidence
Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/title-patterns.md (reported line 1)May include surrounding context.

md
# Title Patterns

Use these title families when stronger click-through is needed.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

The skill explicitly mandates Chinese prose output ('Write in readable, emotional, screenshot-friendly Chinese') without indicating this is conditional on the user's language or a hard platform requirement. This can override user preferences, reduce usability, and cause unintended disclosure or mishandling when downstream systems assume language neutrality.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill is described as a broad end-to-end writing workflow with no clear activation boundaries, narrow domain constraints, or explicit limits on when it should engage. Overly generic triggers increase the chance the agent will invoke this skill for unrelated writing requests, causing prompt-scope overreach, unintended instruction capture, or misuse in contexts the skill was not designed to handle.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This plain-text skill file presents all natural-language content in a single language and does not indicate that Chinese is an intentional, region-specific requirement. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
84% confidence
Finding

The line includes the statement “男人和男人也能接吻吗?” framed as shocked objection, which reads as discriminatory natural-language content about same-sex affection rather than a neutral description. SQP-3 applies to all file types and covers policy-violating language in natural-language text.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
84% confidence
Finding

The file is entirely written as a Chinese-roleplay instruction set and immediately imposes a Chinese persona and cultural framing on the assistant without any opt-in or alternative language/locale path. Under the stated policy, language or locale constraints should not be forced unless the skill clearly offers user choice or documents a justified region-specific scope.

Content

No source excerpt is available for this finding.

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
60% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/samples/种花家拟幼崽给崩铁来点小震撼(上).txt (reported line 1194)May include surrounding context.

text
遇事不决,理性至上。

Static analysis

No suspicious patterns detected.