Security audit

十五五规划智能解读助手

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Chinese-language policy analysis skill with markdown reference files, scoped web search guidance, and no executable code or persistence.

Install this skill if you want Chinese-language assistance with Fifteenth Five-Year Plan interpretation. Expect it to use web search for updates or verification and to generate HTML reports when asked; verify cited policy sources before relying on or sharing the output.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The trigger list includes several broad phrases such as “十五五解读”, “十五五问答”, and “十五五分析报告”, which can match a wide range of loosely related requests and cause the skill to activate outside narrowly intended contexts. Over-broad activation increases the chance of prompt-routing mistakes, unnecessary web access, and unintended influence over answers for queries that only partially relate to planning analysis.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The activation section uses open-ended descriptions like “当用户提出以下类型请求时，加载本技能” followed by broad categories such as policy interpretation, industry opportunity analysis, indicator lookup, and report generation without clear exclusion criteria. This can cause the orchestrator to load the skill for adjacent economic, policy, regional, or report-writing requests that are not specifically about the Fifteenth Five-Year Plan, increasing misrouting and data-fetch behavior.
Content: No source excerpt is available for this finding.

Ae4

Medium

Category: analysis-evasion
Confidence: 80% confidence
Finding: Suspicious Unicode normalization or mixed-script content
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file contains user-facing natural language content that implicitly forces a specific language/locale. Under the policy, language constraints should either offer user choice or be clearly documented and justified; no such opt-in or justification appears in the file.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown file presents all user-facing natural-language content in a single forced locale. Under the policy, language constraints should either offer user choice or be clearly documented and justified; this file contains no such opt-in or justification.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.