Back to skill

Security audit

知行合一

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Chinese self-help skill, but it should be reviewed because it gives intensive emotional exercises and addiction-style health guidance without adequate safety boundaries.

Install only if you want a Chinese-language, structured self-improvement framework. Treat the addiction, dopamine, ADHD, withdrawal, and cold-exposure sections as unverified educational content, not medical or mental-health advice; users in distress or dealing with addiction, severe anxiety, insomnia, trauma, or self-harm thoughts should use qualified professional support instead.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (12)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The activation scope is unusually broad, covering common themes like procrastination, self-improvement, habit building, and life direction. That can cause the skill to trigger in many loosely related conversations, increasing the chance that users are funneled into a strong behavioral framework or intensive exercises they did not explicitly request.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

This section instructs users to perform prolonged, intensive self-reflection about regret, shame, life failure, identity loss, and end-of-life scenarios without any warning, pacing guidance, or option to stop. In a self-help skill, that can amplify distress or destabilize vulnerable users, especially because the material is framed as a full-day protocol for major life restructuring.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown file presents all instructions and explanatory content exclusively in Chinese, and it does not indicate that the user can choose another language or that the skill is intentionally restricted to a Chinese-speaking context. The policy requires flagging language or locale constraints when they are imposed without user opt-in or clear justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown skill forces a specific language for all instructions and examples, which can violate a language/locale policy when no user opt-in or justification is provided. The document does not indicate that Chinese is optional, selectable, or required for a documented regional purpose.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The file gives health and addiction-recovery style guidance as if it were generally applicable treatment advice, including a '30-day reset timeline,' withdrawal symptom expectations, and physiological claims about cold exposure, libido, dopamine, and ADHD recovery, but it does not include warnings about medical uncertainty, contraindications, or when to seek professional help. In a self-help skill aimed at behavior change, users may rely on this as quasi-clinical advice, potentially delaying proper care or worsening psychiatric, addiction, sleep, or cardiovascular conditions.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file contains only Chinese-language instructions and examples, which effectively forces a specific language for users. Under the policy, locale or language constraints should either be optional for the user or clearly documented as justified for a region-specific use case.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

The entire document is written in Chinese and does not indicate that language choice is optional or that the skill is intentionally limited to a Chinese-speaking context. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The document title and all instructional content are presented exclusively in Chinese, with no indication that users can choose another language or that the locale is optional. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

This markdown file is entirely Chinese-language instructional content, and there is no indication that users can opt into another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
90% confidence
Finding

This file presents all user-facing instructions in a single forced language, and there is no indication that users may choose another language or that the Chinese-only format is required for a specific audience. Under the policy, a language or locale constraint without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

All instructional content is written in Chinese, and the file does not indicate that the user opted into Chinese or that the skill is intentionally limited to a Chinese-speaking audience. Under the language/locale policy criterion, this is a natural-language policy concern because it imposes a specific language without explicit user choice or justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
87% confidence
Finding

This markdown file uses only Chinese-language content and does not provide any user opt-in, alternative language, or justification that it is intended solely for a Chinese-speaking audience. Under the language/locale policy rule, forcing a specific language without user choice can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.