Ae1
High
- Category
- analysis-evasion
- Content
node scripts/run.mjs --sample
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Security audit
投标文件生成官（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local, offline Chinese bid-document skeleton generator whose code matches its stated purpose and does not show hidden network, persistence, or credential behavior.
Install this only if you want a Chinese-language, offline aid for structuring bid documents. Treat its output as a checklist and draft skeleton, not legal advice or a final procurement compliance determination, and only provide project data you are comfortable processing locally in the skill runtime.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (10)
Ae1
High
- Category
- analysis-evasion
- Content
node scripts/run.mjs --sample
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
node scripts/run.mjs --sample
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
node scripts/run.mjs --sample
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
scripts/engine/bid-doc.js 生成引擎（确定性规则，可逐条复核）
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Natural-Language Policy Violations
Medium
- Confidence
- 95% confidence
- Finding
- The file describes the engine entirely in Chinese and returns user-facing strings in Chinese such as reasons, messages, verdicts, and summaries throughout the implementation. This indicates a fixed language/locale behavior without any opt-in, fallback, or documented region-specific justification, which matches the policy's language/locale violation criteria.
Natural-Language Policy Violations
Medium
- Confidence
- 95% confidence
- Finding
- This JavaScript file contains extensive natural-language descriptions, labels, and guidance strings exclusively in Chinese. Under the language/locale policy, forcing a specific language without offering user choice or documenting a justified locale constraint is a policy concern.
Natural-Language Policy Violations
Medium
- Confidence
- 89% confidence
- Finding
- The file’s user-facing description, usage text, errors, and output are entirely in Chinese, indicating the skill is designed to operate in a single language. There is no indication that users can opt into another language or that the locale restriction is explicitly justified as a region-specific tool.
Natural-Language Policy Violations
Low
- Confidence
- 90% confidence
- Finding
- This markdown file presents all user-facing guidance in Chinese and does not indicate that the user may choose another language or that the skill is intentionally limited to Chinese-speaking users. Under the policy rule for natural-language violations, forcing a specific language without user opt-in can be a violation unless clearly justified as region-specific.
Natural-Language Policy Violations
Low
- Confidence
- 89% confidence
- Finding
- This JSON sample embeds all human-readable project fields and clause text in Chinese, but provides no natural-language indication that the skill is region-specific or that users can choose another language. Under the policy rule for language or locale constraints, forcing a specific language without opt-in can be a violation unless clearly justified.
Static analysis
No suspicious patterns detected.