Security audit

学术写作润色

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-first academic writing aid with an optional local checklist script; I found no hidden networking, persistence, credential access, or destructive behavior.

Install this if you want a Chinese-language academic polishing and critique workflow. Be aware that most guidance and tool output are in Chinese, and the optional Node checker can read a local file only when you explicitly pass that path with --file. Review generated prose for academic integrity and avoid using style imitation as a substitute for original scholarship or proper citation.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (17)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 92% confidence
Finding: The code’s primary behavior is a simple local CLI checklist for detecting certain Chinese writing patterns often associated with formulaic or AI-like prose. It reads text from arguments or a file, applies regex/string-based heuristics, computes a score, and outputs suggestions. While this partially overlaps with the declared Chinese ‘润色’ and ‘去除AI痕迹’ aspects, the declared description is substantially broader and centers on bilingual academic polishing, logic critique, English academic style support, and critical framework construction. Those major advertised capabilities are absent from the code chunk. The file access is consistent with a CLI text checker and not itself problematic, but the actual implemented scope is materially narrower and different from the declared purpose.
Content: No source excerpt is available for this finding.

Ae1

High

Category: analysis-evasion
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected
Content: Scanner excerpt · SKILL.md (reported line 129)May include surrounding context.
md
node scripts/polish-checklist.js "待检查文本"

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 82% confidence
Finding: The README is entirely written as a Chinese-localized skill description and presents the skill as a direct-use capability without stating that users may choose another language for interaction. Under the policy, forcing a specific language or locale without opt-in can be a natural-language policy violation unless the constraint is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This document mandates a single language for the skill content with no user opt-in, alternative language option, or documentation that the guide is intended only for a Chinese-language audience.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: This markdown file presents all headings, instructions, and examples solely in Chinese, and it does not indicate that the skill is region-specific or provide any user opt-in for language selection. Under the language/locale policy, forcing a specific language without user choice is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: For all file types, natural-language policy violations include forcing a specific language without user opt-in. This markdown skill presents all instructions and examples exclusively in Chinese, and nowhere indicates that the locale is intentionally restricted or that alternatives are available.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The entire skill file is written in Chinese and does not provide any indication that language selection is optional or that the file is intended for a specifically Chinese-speaking or region-specific context. Under the policy rule for language/locale constraints, this can constitute a natural-language policy violation when a specific language is imposed without user opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The file explicitly centers the method on '中文表达的优雅', framing the desired output style as Chinese-language expression rather than offering language choice. Because this is a natural-language instruction file and no opt-in or alternative locale is provided elsewhere, it creates a language/locale policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: 标题“学术风格指南”及全文内容均以中文写作规范为唯一输出目标，且未说明这是可选风格或仅适用于特定中文写作场景。根据规则，若技能强制特定语言或 locale 且没有用户 opt-in，应视为自然语言政策违规。
Content: No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The manifest describes a skill supporting both Chinese and English polishing, logic review, journal-style adaptation, and adversarial questioning frameworks. This file implements only a local checklist of Chinese phrase-pattern checks and simple scoring, with no English handling, logic-fallacy analysis, IMRAD optimization, or framework construction reflected in the code.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The file’s natural-language interface, usage instructions, help text, and output are entirely in Chinese, and there is no indication that users can select another language or that the tool is intentionally limited to a Chinese-only audience. Under the policy rule for language/locale constraints, forcing a specific language without user opt-in is a policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 80% confidence
Finding: The main skill title and core usage instructions are presented entirely in Chinese, while the file only mentions bilingual support in the description rather than explicitly offering users a choice of interaction language. Under the policy, forcing or defaulting to a specific language without opt-in can be a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: This file uses Chinese as the sole instruction language across the entire guide, which can amount to a language/locale constraint for users who do not read Chinese. The policy allows such constraints when they are explicitly justified or offered as an opt-in choice, but this document does not provide either.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: SQP-3 applies to all file types and covers language or locale policy violations. This markdown file presents all instructions and templates only in Chinese, with no indication that the user may choose another language or that the locale restriction is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This markdown file presents all user-facing natural language in a single language with no indication that the skill is intended only for Chinese-speaking users or that language selection is optional. Under the policy rule for language or locale constraints, forcing one language without opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The closing instruction asks the user to continue the interaction in Chinese style preferences ('请告诉我') and the entire skill content is presented only in Chinese, with no indication that language selection is optional. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: This markdown file is entirely written in Chinese and presents the analysis as a fixed-language resource, with no indication that users may choose another language or locale. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale constraint is documented and justified.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.