Back to skill

Security audit

文案重构专家

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only copywriting helper that rewrites marketing text and does not request system access, credentials, persistence, or network behavior.

Install this if you want a Chinese-oriented marketing copy rewriter with strong style rules. For non-Chinese copy, explicitly state your desired output language and review terminology choices because the provided blacklist and examples are Chinese-focused.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

The README’s user-facing instructions and examples are entirely in Chinese, and there is no indication that users may choose another language or that the skill is intentionally limited to a Chinese-language audience. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The instruction '输出语言与输入语言一致' imposes a language behavior automatically and does not indicate that the user may choose a different language. This is a natural-language locale policy concern because it constrains language selection without an explicit opt-in or documented justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

This markdown file presents all instructional content in a single forced language, and there is no indication that the user can opt into another language or that the skill is intentionally region-specific. Under the language/locale policy, forcing one language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The instruction says banned terms must never appear in copy directed at C-end users and the entire blacklist provides only Chinese replacements, effectively enforcing a specific language/locale style. The file does not mention any user opt-in, multilingual option, or region-specific justification for this constraint.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown file contains prescriptive natural-language instructions entirely in Chinese and repeatedly states what wording is allowed or forbidden. Under the policy rule for language or locale constraints, this can be a violation because it imposes a specific language style without any user opt-in or explanation that the skill is intentionally region-specific.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.