Security audit

rubric-gap-analyzer

Security checks for vulnerabilities and agentic risk

Overview

This is a small Chinese-language rubric analysis skill that locally reads clipboard text when invoked, with no evidence of network access, persistence, or hidden behavior.

Install only if you are comfortable with a Chinese-language workflow that reads your macOS clipboard on request. Before invoking it, make sure the clipboard contains only the rubric, assignment, or draft text you want analyzed, not passwords, tokens, private messages, or unrelated confidential material.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The natural-language instructions and invocation examples require Chinese comprehension, which effectively forces a specific language for users. The file does not offer an opt-in language choice or explain that the skill is intended only for a Chinese-language environment.

Context-Inappropriate Capability

Medium

Confidence: 97% confidence
Finding: This script reads the system clipboard and prints its full contents, even though clipboard access is not clearly necessary for a rubric gap analysis skill. Clipboard data often contains unrelated sensitive information such as passwords, tokens, personal data, or confidential work product, so collecting it without tight scoping creates an unnecessary data-exposure path.

Missing User Warnings

Medium

Confidence: 99% confidence
Finding: The code accesses the clipboard and then emits the entire clipboard contents to stdout with no confirmation or warning. That behavior can leak sensitive clipboard data into logs, terminal scrollback, parent processes, or other tooling integrations, turning a local privacy issue into broader unintended disclosure.

Natural-Language Policy Violations

Low

Confidence: 92% confidence
Finding: The changelog entries are presented exclusively in Chinese, which can constitute a language/locale policy issue when no opt-in, alternative language, or justification is provided. The file does not explain that the skill is region-specific or that Chinese is an intentional documented constraint.

Natural-Language Policy Violations

Low

Confidence: 91% confidence
Finding: The error message is hard-coded in Chinese, which imposes a specific language on users without opt-in or explanation. This can violate language or locale policy when the skill is not explicitly documented as Chinese-only or region-specific.

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/read_clipboard.mjs:5