Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 70% confidence
- Finding
- Without declared permissions the skill's intent is opaque and cannot be validated.
Security audit
超级个体能力自测
Security checks for vulnerabilities and agentic risk
Overview
This skill is a coherent Chinese-language self-assessment workflow with a small local scoring script and no evidence of hidden access, persistence, network use, or destructive behavior.
Install this if you want a Chinese-language, evidence-based career capability self-assessment. Be aware it may ask for sensitive career and paid-work examples, so avoid sharing private client details or financial information unless you are comfortable doing so. Non-Chinese users may find the workflow and generated labels unclear.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)
Vague Triggers
Medium
- Confidence
- 95% confidence
- Finding
- The description includes broad trigger phrases like general self-assessment, market value evaluation, and capability radar requests, which can match ordinary conversation and cause the skill to activate unexpectedly. Over-broad invocation increases the chance of context hijacking, user confusion, and unintended handling of sensitive career or financial discussions under this workflow.
Natural-Language Policy Violations
Medium
- Confidence
- 88% confidence
- Finding
- The skill content is entirely in Chinese and does not offer a language choice, which can cause misunderstandings if invoked for users communicating in other languages. In an assessment workflow that collects scores and evidence, language mismatch can distort user inputs, consent, and interpretation of results, though it is not directly a code-execution or data-exfiltration issue.
Natural-Language Policy Violations
Medium
- Confidence
- 84% confidence
- Finding
- The entire assessment content is written in Chinese and presents the skill material in a single fixed language. There is no indication that users may opt into another language or that the skill is intentionally limited to a Chinese-speaking context, which can violate language/locale policy requirements.
Natural-Language Policy Violations
Medium
- Confidence
- 95% confidence
- Finding
- The script hard-codes Chinese labels and assessment tier messages in user-facing output, which imposes a specific language on all users. This is a natural-language policy concern because the file provides no opt-in, configuration, or documented justification for the locale restriction.
Natural-Language Policy Violations
Low
- Confidence
- 91% confidence
- Finding
- The file presents the skill name and description in Chinese while the default prompt is hard-coded in English. This creates a language/locale policy concern because the skill implicitly forces mixed-language behavior without documenting user choice or opt-in.
Static analysis
No suspicious patterns detected.