T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:9- Finding
Internal Search Traffic Uses Unencrypted HTTP
- Content
View full analysis
- Remediation
View remediation
Security audit
Jd Search
Security checks for vulnerabilities and agentic risk
Overview
This appears to be a narrow JD-internal product-search CLI wrapper, with notable install and transport caveats but no evidence of deception, persistence, data theft, or destructive behavior.
Install only if you are in the intended JD internal environment and can obtain or verify the missing jd-search executable from the publisher. Treat searches as visible to internal network infrastructure unless HTTPS or another authenticated transport is provided, and avoid sensitive query terms if that risk is unacceptable.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The skill description is written in Chinese and does not provide an English alternative or indicate that the skill is intentionally limited to Chinese-speaking users. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is clearly documented and justified.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
The description string uses Chinese exclusively and does not state that the skill is intended only for Chinese-speaking users or a China-specific context. Under the language/locale policy, forcing a specific language without opt-in or justification can be a natural-language policy issue.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The manifest's user-facing description is entirely in Chinese, which effectively forces a specific language for users without any opt-in or note that the skill is intended only for a Chinese-speaking or region-specific audience. The stated policy requires flagging language or locale constraints when they are imposed without user choice or clear justification.
- Content
Static analysis
No suspicious patterns detected.