Security audit

阳明心学

Security checks for vulnerabilities and agentic risk

Overview

This is a self-contained Chinese-language philosophy guidance skill with no evidence of hidden execution, data access, persistence, or exfiltration.

Install this if you want a Chinese-language Yangming philosophy assistant. Treat its advice on anxiety, relationships, decisions, and work as reflective or educational guidance; seek qualified help for medical, mental-health crisis, legal, financial, or other high-stakes situations.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (8)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The activation scope for personal problems is very broad, covering common emotional and life-difficulty phrasing such as stress, confusion, procrastination, and relationship issues. This can cause the skill to trigger on sensitive user disclosures outside a narrowly bounded philosophy context, leading to unintended handling of mental-health-adjacent or high-stakes advice scenarios without clear safety gating.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The catch-all path for 'comprehensive questions/one-sentence prompts' delegates to an intent guess and module combination, which makes invocation boundaries ambiguous. In practice, this increases the chance the skill will activate on loosely related prompts and produce authoritative-seeming guidance or HTML reports even when the user did not clearly ask for this domain-specific assistance.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The template sets the document language to "zh-CN", which establishes a fixed language/locale for rendered content. Per the policy, forcing a specific language without user opt-in or clear justification is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 87% confidence
Finding: This markdown file is natural-language content, so language-policy checks apply. The document presents all user-facing material in Chinese and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-language audience.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: This markdown file presents all user-facing content in Chinese and does not indicate that the language was selected by the user or that the skill is intentionally limited to a Chinese-speaking audience. Under the language/locale policy rule, forcing a specific language without opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: This markdown skill content presents all instructions and explanations only in Chinese, which can constitute a language/locale policy issue when no user opt-in or justification is provided. The file does not indicate that the skill is specifically intended for Chinese-speaking users or offer an alternative language.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown file contains user-facing guidance exclusively in Chinese from title to end, with no indication that the skill is intentionally region-specific or that users can opt into another language. Under the natural-language policy rule, forcing a specific language without user choice is a locale-policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 85% confidence
Finding: This markdown file presents all content exclusively in Chinese and does not indicate that the user can choose another language. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a locale/language policy issue.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.