Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
车队油耗与运费核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local Chinese-language ledger checker with no network, persistence, credential use, or hidden mutation behavior, though one output disclaimer overstates a check that the free version does not run.
Install only if a local Chinese-language fleet fuel/freight ledger checker is what you need. Treat its output as arithmetic review, not a complete audit: the free version does not perform the listed withheld checks, especially cost-vs-revenue review, despite one inconsistent disclaimer in the engine output.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (8)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The natural-language comments and user-facing guidance at the top of the file are entirely in Chinese, including operational instructions and disclaimers, with no indication that another language is supported or that the user can choose a locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
- Content
Intent-Code Divergence
Medium
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
The code’s disclaimer claims it performs a cost-vs-revenue consistency check, including logic equivalent to comparing oil fee plus tolls against freight revenue, but no such check is actually executed in the free-path logic. In a financial/audit skill, overstating performed validations can cause users to rely on missing controls and overlook loss-making or manipulated rows that the tool implies it checked.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
This code file contains natural-language strings and help text that force a specific language/locale for operation and output. Under the policy, language constraints should not be imposed without user choice unless clearly documented as a justified region-specific tool.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The message states that when a required field is blank, “这一行算不出油耗定额，请补齐”. But this same message is generated for missing period, plate, or fuel-difference fields, which do not all specifically make fuel quota computation impossible. This is an active mismatch between the inline user-facing explanation and the actual generalized blank-field check.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The inline documentation says non-JSON input is treated as plain-text material, giving '直接粘贴的合同全文' as the example. That example contradicts the surrounding file intent and manifest, which consistently describe checking vehicle fuel-consumption and freight ledgers rather than generic contract text.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 87% confidence
- Finding
The JSON sample text uses Chinese column headers and a Chinese vehicle plate format, which indicates a hard-coded language/locale assumption. For a general template file, this can be a natural-language locale policy issue because no opt-in, language selection, or region-specific justification is provided.
- Content