Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
锅炉压力容器定期检验与台账核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local Chinese-language checker for boiler and pressure-vessel ledger data, with no evidence of network access, persistence, credential use, or hidden behavior.
Install only if you are comfortable running a local Node-based checker on Chinese-format boiler or pressure-vessel ledger text. It does not verify official certificates online or replace regulatory/legal judgment, and non-Chinese users may find the interface difficult to use.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (7)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Lp1
High
- Category
- MCP Least Privilege
- Confidence
- 75% confidence
- Finding
The skill uses 'env' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
This JavaScript file’s natural-language contract, instructions, sample data, labels, and remediation text are all written in Chinese, and the input/output guidance assumes Chinese-speaking users. There is no user opt-in, fallback language handling, or documented statement that this skill is intentionally restricted to a China-specific audience, which creates a language/locale policy concern.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The user-facing capability description, usage text, prompts, and status messages are entirely in Chinese, and the file provides no indication that another language can be selected. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation unless clearly documented as a justified region-specific constraint.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
L075 的注释说明“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，但该脚本其余文档和清晰的用途都限定为锅炉压力容器定期检验与台账核对材料。这里不是单纯信息缺失，而是用与技能目的不一致的文档示例描述了输入范围，容易让调用方误解该技能可处理无关文档。
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 79% confidence
- Finding
The JSON payload consists entirely of Chinese headers, status values, and narrative text, with no indication that the skill is region-specific or that users can opt into this locale. For a general-purpose template file, this can violate language/locale policy by implicitly forcing one language without user choice.
- Content