Back to skill

Security audit

gov-data-governance-consultant

Security checks for vulnerabilities and agentic risk

Overview

This is a narrow Chinese public-sector consulting skill that searches public policy sources and drafts governance reports, with no hidden execution, persistence, or credential handling found.

Install this only if you want Chinese-language public-sector data-governance consulting. Because it relies on current web search and policy interpretation, users should verify cited policy sources before using outputs for official, legal, fiscal, or procurement decisions.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
87% confidence
Finding

The README presents the skill name, description, and usage exclusively in Chinese. Under the policy rule for natural-language violations, forcing a specific language without giving the user a choice or documenting a justified locale constraint is reportable.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The manifest description and the entire skill specification are written as a Chinese-only government consulting expert, and the workflow/output sections implicitly require responses in Chinese governmental wording. There is no user opt-in or alternative language option, which matches the language/locale policy violation category for natural-language policy concerns.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
87% confidence
Finding

The natural-language description and all user-facing parameter descriptions are written exclusively in Chinese, indicating the skill is intended to operate in a specific language/locale. The file does not offer any user opt-in or alternative language choice, and it does not document a region-specific justification that would exempt the restriction.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
77% confidence
Finding

The test case names, inputs, and validation rules are entirely written for Chinese-language, China-specific governmental scenarios, and the file does not indicate that this locale restriction is optional or user-selectable. Under the policy, forcing a specific language or locale without opt-in can be a natural-language policy concern unless the regional constraint is clearly documented and justified.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.