Back to skill

Security audit

鲁迅先生写作手法

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only Chinese literary writing-style skill with no code execution, persistence, credential access, or hidden data movement.

Install this only if you want a strong Chinese Lu Xun-inspired rewrite mode; invoke it explicitly for that style, and avoid relying on it for neutral editing, marketing copy, or user-facing text where a warmer or different-language tone is required.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (8)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

The trigger list is broad and stylistic, using common phrases like '不要鸡汤', '力量感', and '怀疑' that can match ordinary writing requests far beyond the intended niche. This can cause unintended activation and style takeover, leading the agent to apply a strong ideological or tonal transformation when the user likely wanted general editing help.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

This markdown file is entirely written as Chinese-only instructional content and gives no indication that users may choose another language. Under the policy, language or locale constraints should either be optional for the user or clearly justified as region-specific; neither is stated here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

This markdown file is entirely framed as a Chinese-only writing template, beginning with a Chinese title and then prescribing a specific Chinese literary style throughout. Because the skill does not indicate that the language choice is optional or limited to a justified region-specific context, it creates a natural-language locale constraint without user opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

This markdown file is written entirely in Chinese from the title onward, and nowhere offers an alternative language or indicates that Chinese is an intentional, region-specific requirement. Under the policy rule for natural-language violations, forcing a specific language without user opt-in is in scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

This markdown file is written entirely in Chinese and repeatedly frames the prescribed writing approach as mandatory, without offering any language or locale choice or noting that it is intended for a Chinese-speaking audience. Under the policy scope for natural-language violations, forcing a specific language without user opt-in is in scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The entire skill content is written as prescriptive guidance in Chinese and presents itself as a general writing skill, but it does not offer any language or locale opt-in. Under the policy, forcing a specific language without user choice is a natural-language policy violation unless the constraint is clearly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

This file is written entirely in Chinese and strongly frames the skill around a fixed Chinese-language stylistic mode without indicating any option to adapt to the user's requested language. In an agent setting, forcing output language/locale without opt-in can cause user confusion, unusable responses, and policy bypass of user preference or platform locale expectations, though it is not directly malicious.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
72% confidence
Finding

The description is entirely framed around Chinese literary style and Chinese trigger phrases, and the tags explicitly mark the skill as 'chinese'. While the specialization may be intentional, the file does not state that this language constraint is optional or user-selected, which can conflict with language-choice policy expectations.

Content

No source excerpt is available for this finding.