Back to skill

Security audit

专利撰写专家

Security checks for vulnerabilities and agentic risk

Overview

This is a China-focused patent drafting helper with broad but disclosed patent guidance behavior and no executable code, persistence, credential use, or hidden data flow.

Install this only if you want China-oriented patent drafting or review help. Treat generated patent text as a draft, avoid sharing trade secrets unless needed for the task, and have a qualified patent professional review anything before filing.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The trigger list is extremely broad and includes generic patent-related phrases that can activate the skill for loosely related conversations. Overbroad activation can cause unintended routing, making the agent produce specialized legal-style drafting output when the user only wanted general information, which increases the chance of inappropriate data collection or misleading assistance.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The activation conditions are broad enough to capture general patent questions, not just requests for document drafting or review. In a skill that can generate formal patent application materials, this increases the risk of overstepping user intent and eliciting sensitive invention details unnecessarily.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The report style requires "中文撰写(技术术语可保留英文)", which enforces a specific language for outputs. The file does not present this as a user-selectable option or clearly justify the restriction as a mandatory region-specific constraint for all interactions.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file presents all instructions exclusively in Chinese and does not indicate that the user can choose another language or that the checklist is intentionally limited to Chinese-speaking users. Under the language/locale policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The document is entirely prescriptive in Chinese and includes required Chinese template text such as "本发明涉及[领域],具体涉及[方向]" and "根据权利要求1所述...", which effectively forces a specific language/locale for use. Under the policy, a skill should not impose a language without user opt-in unless the locale constraint is explicitly justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown file uses only Chinese-language content and provides no indication that the skill is limited to Chinese-speaking users or a China-specific audience by design. Under the language/locale policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.