Security audit

Onboarding Flow Designer(2)

Security checks for vulnerabilities and agentic risk

Overview

This skill only guides users through a Chinese-language onboarding-flow design template and does not request sensitive access or perform actions outside that purpose.

Install this if you want a Chinese-language assistant for structured onboarding design. Be aware that common onboarding phrases may trigger it automatically, and users who prefer another language may need to ask explicitly for that language.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The trigger phrases include generic requests like '设计新手引导' and '新用户怎么上手', which are broad enough to match normal product-design conversations outside the user's intent to invoke this specific skill. This can cause accidental activation, unexpected context capture, or unsolicited workflow takeover, which is a legitimate security and safety concern for agentic systems even though the skill itself is business-oriented.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 84% confidence
Finding: Natural-language instructions, triggers, and output requirements are all specified in Chinese, and the skill does not indicate that users may interact in other languages or opt into Chinese output. This can violate language/locale policy when no user choice or region-specific justification is provided.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The trigger phrases are broad enough to match ordinary UX or product-design discussion, so the skill may activate when the user did not intend to invoke it. Unintended invocation can override normal assistant behavior, steer the conversation into a rigid workflow, and cause prompt-scope confusion in multi-skill environments.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The natural-language instructions, usage, and examples are written in Chinese, and the file does not indicate that the language is optional or limited to a specific regional deployment. This can violate language-choice policy where users should not be forced into a specific language without opt-in or justification.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.