fe-cli

• Outcome: Pass
• Latest audit: Oct 13, 2026 · 4:12 AM UTC
• Version: 3.1.4

Overview

This skill is a frontend project scaffolder, and the sensitive-looking items are disclosed templates rather than hidden data access or control.

This is reasonable to install for frontend scaffolding. Before using generated projects in production, review third-party package choices, replace placeholder API/update URLs, choose the desired locale explicitly, and harden auth storage for sensitive apps, especially desktop auto-update and any local token persistence.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (53)

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 93)May include surrounding context.

md

Read `references/shared-base.md` and `references/shared-config.md` for code templates.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 182)May include surrounding context.

md

Read `references/shared-base.md` and `references/shared-config.md` for code templates.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 223)May include surrounding context.

md

Read `references/shared-base.md` and `references/shared-config.md` for code templates.

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 184)May include surrounding context.

md

基础设施层模板见 `references/shared-infrastructure.md`（状态管理、主题系统、i18n、通用 Hooks、全局组件、布局、路由守卫、常量配置）。

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · references/shared-config.md (reported line 230)May include surrounding context.

md

build/

# Environment
.env.local
.env.*.local

# IDE

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · ssr/SKILL.md (reported line 242)May include surrounding context.

md

build/

# Environment
.env.local
.env.*.local

# IDE

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 156)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · references/ai-project-md.md (reported line 120)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · references/shared-base.md (reported line 566)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · references/shared-infrastructure.md (reported line 1068)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · tauri/SKILL.md (reported line 96)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 157)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · references/ai-project-md.md (reported line 121)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · references/shared-base.md (reported line 572)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · ssr/SKILL.md (reported line 243)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · tauri/SKILL.md (reported line 96)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 159)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · references/ai-project-md.md (reported line 123)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · references/shared-base.md (reported line 582)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · ssr/SKILL.md (reported line 244)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · tauri/SKILL.md (reported line 96)May include surrounding context.

│ └── default.json # Permission capabilities ├── package.json ├── vite.config.ts └── .env / .env.development / .env.production

text

### Step 5: Key Templates

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The template hard-codes Chinese menu labels such as '仪表盘', '列表页', and '表单页', and similar Chinese strings appear throughout the generated UI. This creates a language default that may force a specific locale for end users unless the skill operator manually changes it, which conflicts with the language/locale policy criteria.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The React template imports zh_CN and the comment states the default locale is Chinese unless manually replaced. Because the skill sets a specific locale by default rather than asking the user, it may violate the requirement to avoid forcing a language or locale without opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The Vue template imports zh-cn for Element Plus and applies it as the default locale. Although the comment notes it is configurable, the scaffold still forces Chinese unless the user changes it, which is a locale-policy concern.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The trigger text is somewhat broad because it activates on general requests like Astro/Gatsby/建站/博客/文档站/VitePress project, which could cause the sub-skill to run in situations where the user only wants advice rather than scaffolding. In an agent system, overly permissive invocation boundaries can lead to inappropriate tool use, unnecessary command generation, or bypass of a more suitable higher-level review flow.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.