Security audit

AI 写作诊断

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only Chinese writing diagnosis skill with no code execution, persistence, credential access, or hidden data movement.

Install this if you want Chinese-language AI-writing style diagnosis. Expect the skill to answer in Chinese by default and to quote parts of drafts you provide, but the inspected package does not show code execution, background activity, credential use, or data exfiltration.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (5)

Natural-Language Policy Violations

Medium

Confidence: 94% confidence
Finding: The file states 'Assume the following unless the user says otherwise: - write in Chinese,' which imposes a language default rather than offering a user choice first. The policy allows language constraints only when the user opts in or when the locale restriction is clearly justified; this file does not provide such justification.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: The prompt explicitly instructs the skill to inspect 'this Chinese draft', which imposes a language-specific constraint in natural language. The file does not offer a user language choice or explain why Chinese-only behavior is required, so this appears to violate the language/locale policy requirement.

Natural-Language Policy Violations

Medium

Confidence: 97% confidence
Finding: The entire report template is written in Chinese and provides no indication that language selection is optional or limited to a justified Chinese-only workflow. This creates a natural-language policy concern because it effectively enforces a specific language/locale without user opt-in.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: This markdown file contains user-facing guidance exclusively in Chinese, and there is no indication that the skill is region-specific or that users may opt into another language. Under the language/locale policy rule, forcing a specific language without opt-in is a natural-language policy concern.

Natural-Language Policy Violations

Low

Confidence: 84% confidence
Finding: This markdown file is entirely written in Chinese and does not state that the language is optional or limited to a specific audience. Under the natural-language policy rule, forcing a specific language without user opt-in can be a locale policy concern.

Static analysis

No suspicious patterns detected.