Ae1
High
- Category
- analysis-evasion
- Content
node scripts/run.mjs --sample # 先看内置样例
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Security audit
应付暂估与发票未到核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This is a local Chinese-language accounts-payable ledger checker that reads a user-provided file, performs deterministic checks, and shows results without network use, persistence, or data mutation.
Install only if you want a Chinese-language, local-only checker for AP provisional ledger text exported from a spreadsheet. It processes finance-related data locally, but it is not accounting, audit, tax, or legal advice and it only runs the listed free checks.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (7)
Ae1
High
- Category
- analysis-evasion
- Content
node scripts/run.mjs --sample # 先看内置样例
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
node scripts/run.mjs --sample # 先看内置样例
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Natural-Language Policy Violations
Medium
- Confidence
- 93% confidence
- Finding
- The file’s natural-language comments, sample input schema, labels, and user-facing advice are all written exclusively in Chinese, indicating the skill is designed to operate in a single language. There is no documented opt-in, fallback, or alternative locale handling, which can violate language-choice policy for general-purpose skills.
Natural-Language Policy Violations
Medium
- Confidence
- 93% confidence
- Finding
- The file’s user-facing capability name, usage text, help output, errors, and status messages are all written exclusively in Chinese. There is no indication that the user can choose another language, nor any documented justification that this skill is intentionally limited to a Chinese-speaking or China-specific compliance context.
Intent-Code Divergence
Low
- Confidence
- 89% confidence
- Finding
- L075 的注释写明“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，这与本文件其余说明及清单用途——应付暂估台账核对、且需含表头——形成明显冲突。代码本身确实会接受任意纯文本，但该注释主动暗示了与技能声明不符的材料类型，容易误导使用者对技能适用范围的理解。
Natural-Language Policy Violations
Low
- Confidence
- 89% confidence
- Finding
- The only natural-language content in this manifest-style JSON is a Chinese tabular template, which effectively fixes the skill content to a specific language/locale. There is no indication that the user can choose another language or that the locale restriction is explicitly justified as region-specific.
Static analysis
No suspicious patterns detected.