Back to skill

Security audit

校园邮件模板

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Chinese campus email and document template helper with no executable code or hidden system access.

Install this if you want help drafting Chinese campus emails, applications, reports, and notices. Review any generated draft before sending, replace all placeholders, and avoid adding unnecessary sensitive details such as medical, family, phone, or student-record information unless the recipient truly requires it.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The instruction says the skill should '默认使用简体中文', which imposes a specific language/locale by default. Under the policy, forcing a language without explicit user choice or opt-in is a natural-language policy violation unless clearly justified as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

文件标题和全部模板内容均以中文编写,并面向通用“校园邮件与公文场景”提供固定输出格式,但未说明仅适用于中文场景,也未给用户提供语言/locale 选择。按规则,这属于自然语言层面的语言/locale 约束,可能导致在非中文使用场景下未经用户选择地强制使用特定语言。

Content

No source excerpt is available for this finding.