Security audit

chaoge-zhouyi

Security checks for vulnerabilities and agentic risk

Overview

This does not look like malware, but it needs Review because an entertainment divination skill includes actionable health, healing, and exorcism-style ritual guidance that users could mistake for real care.

Review carefully before installing. The main risk is not malware; it is that the skill may give authoritative-sounding spiritual or ritual advice for health, distress, safety, or major life decisions. It should not be used for medical, mental-health, emergency, legal, financial, or safety decisions unless the publisher narrows the corpus and adds strong refusal and professional-care guidance.

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (49)

Description-Behavior Mismatch

High

Category: Not specified by scanner
Confidence: 97% confidence
Finding: This is a true safety vulnerability: the file gives ritual guidance framed as relevant to serious medical and mental-health-like conditions, including post-operative coma, altered mental status, and behavioral abnormalities. Even though it includes disclaimers, the operational instructions and efficacy claims can delay urgent medical evaluation or encourage substitution of spiritual practice for evidence-based care.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

High

Category: Not specified by scanner
Confidence: 98% confidence
Finding: This section specifically maps symptoms like confusion, post-surgical coma, and suspected possession-like behavior to spiritual remedies, which is context-inappropriate and dangerous. In a divination/fortune-telling skill, presenting spiritual handling instructions for acute medical or psychiatric presentations increases the risk of users mismanaging emergencies.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The file moves beyond interpretive or historical content into step-by-step instructions for producing and using talismans, including timing, setup, materials, and application. In this skill context, that materially increases the chance that users will act on the ritual as an intervention rather than treat it as entertainment or folklore.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The document's disclaimers are undermined by case studies claiming recovery and a concluding statement asserting the ritual 'will be effective,' which can make the warnings non-credible. This contradiction is dangerous because users may rely on the stronger efficacy messaging while discounting the cautionary language.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The document’s standard output template says 体卦 is the moving-line trigram and 用卦 is the other trigram, which directly contradicts the earlier corrected rule stating 无动爻为体、有动爻为用. In an instruction file for an agent skill, this inconsistency can cause the model to produce systematically incorrect analyses, reducing reliability and potentially misleading users who rely on the generated interpretation.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The usage note states ‘命卦用动爻规则,’ which conflicts with the earlier section that says the same standard rule applies to both 问事卦 and 命卦: 无动爻为体、有动爻为用. Conflicting operational guidance inside a skill can steer downstream outputs in inconsistent ways, causing wrong or non-deterministic results for users.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The reference file materially broadens the skill from entertainment-focused divination into operational ritual magic, exorcism, healing, and spirit-invocation content. Even if framed as cultural material, this creates capability drift: an agent using this reference could provide instructions or endorsement for real-world occult, medical, or coercive practices that are outside the declared skill scope.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: This section presents stepwise methods for writing talismans, chanting incantations, and performing rituals, which turns the document from interpretive reference into procedural guidance. In an agent skill, such operational instructions increase the likelihood the model will assist users in performing rituals, pseudo-healing, or other real-world acts not covered by the manifest's entertainment positioning.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This reference file materially expands a divination/fortune-telling skill into traditional Chinese medicine content, including disease analysis, treatment-oriented framing, and advice to connect theory with clinical practice. In a non-medical skill, that increases the chance the agent will generate unqualified health guidance, which users may rely on instead of seeking proper care despite the lightweight disclaimer.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The reference file goes well beyond divination/fortune-telling and includes ritualized practices for wealth, fertility, exorcism, curse-removal, and other folk-magic interventions. In a skill marketed around Zhouyi divination for entertainment, this scope expansion increases the chance the agent will surface prescriptive occult guidance users may act on in real life.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: This section presents bodily and health-adjacent interventions such as stop-bleeding, reduce-swelling, stop-hiccups, and toothache remedies that can be mistaken for treatment. Users may delay proper care or try unsafe actions because the content is embedded as practical instructions rather than clearly framed as non-medical folklore.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This section expands the skill beyond entertainment-oriented divination into talisman use for exorcism, healing, and driving away evil. In the context of a user-facing skill, that creates harmful scope drift: users may receive spiritual or quasi-medical ritual guidance that is inconsistent with the manifest and could discourage appropriate real-world care or promote unsafe occult practices.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: These lines provide procedural ritual instructions such as choosing auspicious dates, fasting, drawing talismans, practice, and application, which go beyond descriptive cultural content into actionable occult practice guidance. Because the skill is marketed as entertainment divination, such instructions materially increase the chance the agent will output unsafe or misleading ritual advice outside its declared purpose.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The reference file explicitly states that 'actual talisman application' should be combined with specific illness analysis and that healing should rely on medical treatment with talisman use as an auxiliary. Even with a disclaimer, this goes beyond the skill's stated entertainment-only divination scope and can normalize pseudomedical guidance, potentially encouraging users to treat illness through occult practices or delay proper care.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The file labels itself as a reference document, but the concluding notes include illness-related application framing that is inconsistent with a purely entertainment or historical reference. This mismatch can mislead downstream agent behavior into presenting medical-adjacent guidance as acceptable reference content.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 83% confidence
Finding: This section provides actionable instructions for creating and using talismans and ritual objects, which goes beyond passive cultural description into procedural occult guidance. In the context of an entertainment-oriented divination skill, that increases risk of encouraging deceptive, superstitious, or psychologically manipulative practices, especially for vulnerable users despite the surrounding warnings.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: This section presents condition-specific healing and recovery claims for concrete medical symptoms, including postoperative complications, coma-related behavior, and predicted improvement timelines. In a skill framed as entertainment/divination, these claims can mislead vulnerable users into treating ritual content as medical guidance, especially because the examples imply efficacy for serious health conditions.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The document includes personalized ritual recommendations for a named individual with a specific medical history, including post-gastrectomy weakness and related health concerns. Tailored instructions for a real or plausibly real patient's condition elevate the content from folklore reference material into quasi-medical advice, increasing the chance of harmful reliance.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The file contains cautionary language saying talismans are only auxiliary, but nearby text promises concrete therapeutic outcomes and recovery expectations. This contradiction undermines the disclaimer and can cause users to overweight the stronger efficacy claims, making the safety language ineffective.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The statement '诚心修持，必有效果' is a categorical promise of efficacy that directly conflicts with the document's own warnings that talismans are not万能 and medicine should come first. Absolute claims are particularly dangerous in a health-adjacent context because they encourage reliance on unverified practices.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The file substantially exceeds the skill’s stated divination/fortune-telling scope by including detailed ghost identification, home protection, spirit-handling, exorcism, and suppression instructions. In a consumer-facing entertainment skill, this can mislead distressed users into relying on occult practices instead of appropriate mental health, medical, or safety support, especially because the document presents procedural steps and tools rather than purely historical description.
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: This section gives actionable ritual guidance for exorcism and ghost suppression, including stepwise procedures, invocations, and recommended implements. Although not cyber-dangerous, it is safety-relevant because it can encourage vulnerable users to perform coercive, delusional, or avoidance-based behavior under the belief that supernatural harm is occurring, which is not justified by the skill’s stated entertainment purpose.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The document presents itself as '仅供文化研究' and warns against superstition, but elsewhere gives step-by-step ritual instructions, repayment calculations, chants, recommended dates, and repeated claims that performing the ritual will remove disasters, improve finances, and extend life. This contradiction can mislead users into treating spiritual debt repayment as actionable advice, especially vulnerable users facing financial, medical, or psychological distress.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The file states that talismans can be used in actual illness contexts and frames them as an auxiliary treatment, which goes beyond the skill's entertainment-only positioning. In a user-facing agent, this can encourage reliance on unverified spiritual healing claims and may delay appropriate medical care for real health conditions.
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The reference document is centered on disease-treatment talismans and repeatedly describes methods for healing, spiritual intervention, and practical application, which materially expands the skill beyond its declared divination/entertainment scope. This mismatch increases the chance the agent will surface harmful pseudo-medical instructions or claims when users ask health-related questions.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.