Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
商誉减值测试底稿核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local, deterministic checker for goodwill impairment working-paper tables and does not show hidden network, persistence, or destructive behavior.
Before installing, understand that this is a local table-checking helper, not accounting, tax, audit, or valuation advice. It expects exported or pasted working-paper text and will only run the free checks it lists; do not treat a clean result as a complete goodwill impairment review.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The comment says non-JSON content is treated as plain-text material such as '直接粘贴的合同全文', which contradicts the rest of the file's stated purpose of checking goodwill impairment test working papers. The implementation does indeed accept arbitrary plain text, but the inline documentation introduces a mismatched example that actively points to a different document type than the declared capability.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The JSON contains only Chinese-language table headers and values, which indicates a fixed language/locale. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation when no alternative or justification is provided.
- Content