Back to skill

Security audit

企业成本核算技能包

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese cost-accounting reference skill with formulas and Excel templates, and I found no execution, data access, or persistence behavior.

This appears appropriate to install as a cost-accounting reference skill. Before relying on its calculations or tax/accounting treatment, users should verify outputs against current local accounting standards and professional judgment; also note that its broad triggers may activate it for nearby finance topics and its default language is Chinese.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The trigger list includes many broad, generic finance/accounting terms such as '成本分析', '成本控制', and '盈亏平衡', which can cause the skill to activate in contexts where the user did not intend to use this specific package. Over-broad invocation increases the chance of prompt-routing mistakes, irrelevant responses, and accidental exposure of the skill's internal guidance in unrelated finance workflows.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The skill description and the body of the document are written almost entirely in Chinese, and the usage examples likewise assume Chinese interaction. There is no natural-language indication that users may choose another language or locale, which can violate a language-choice policy when no opt-in is provided.

Content

No source excerpt is available for this finding.