Ae1
High
- Category
- analysis-evasion
- Content
| `assets/index.html` | 完整的手账页面。单文件、双击即可打开；不配同步时全程离线、不发任何请求 |
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Security audit
未来日记 Future Journal
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent offline journal skill with clearly disclosed optional encrypted sync behavior.
Safe to install for offline journaling. Before enabling sync, understand that it will load a pinned third-party SDK, send login email/session data to the backend you configure, and store a local encryption key in browser storage; keep backups because localStorage can be cleared by the browser.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (12)
Ae1
High
- Category
- analysis-evasion
- Content
| `assets/index.html` | 完整的手账页面。单文件、双击即可打开；不配同步时全程离线、不发任何请求 |
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
| `assets/index.html` | 完整的手账页面。单文件、双击即可打开；不配同步时全程离线、不发任何请求 |
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
| `assets/index.html` | 完整的手账页面。单文件、双击即可打开；不配同步时全程离线、不发任何请求 |
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
| `assets/index.html` | 完整的手账页面。单文件、双击即可打开；不配同步时全程离线、不发任何请求 |
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
| `assets/index.html` | 完整的手账页面。单文件、双击即可打开；不配同步时全程离线、不发任何请求 |
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
| `assets/index.html` | 完整的手账页面。单文件、双击即可打开；不配同步时全程离线、不发任何请求 |
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
以上 5 个文件（含 `SKILL.md` 自身）是 skill 的完整能力面，**发放给别人的就是这些**。
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
以上 5 个文件（含 `SKILL.md` 自身）是 skill 的完整能力面，**发放给别人的就是这些**。
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
以上 5 个文件（含 `SKILL.md` 自身）是 skill 的完整能力面，**发放给别人的就是这些**。
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Natural-Language Policy Violations
Medium
- Confidence
- 88% confidence
- Finding
- The design spec states that the default locale is Simplified Chinese (zh-CN) and that other locales are only available 'on request'. This imposes a locale default in the skill design without an explicit user opt-in or built-in language selection, which matches the policy category for language/locale constraints.
Natural-Language Policy Violations
Medium
- Confidence
- 86% confidence
- Finding
- These lines specify bilingual font fallback but still mandate zh-CN as the default UI locale, while other locales are merely available by request. That is a natural-language locale policy concern because it constrains the user experience to a specific language by default rather than offering user choice.
Static analysis
No suspicious patterns detected.