Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
工资个税累计预扣核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local Chinese payroll tax worksheet checker that reads a user-provided file and runs deterministic arithmetic checks without network, persistence, or credential use.
Install only if you need a Chinese payroll individual income tax withholding worksheet checker. It runs locally and does not appear to send data out, but it is a free subset and explicitly does not perform several checks or provide tax advice.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
This code file contains natural-language descriptions and user-facing output entirely in Chinese, including the top-level skill description and runtime advice strings. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified, which is not present here.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The JSON content is entirely in Chinese field labels and example data, indicating a fixed language/locale assumption. There is no accompanying natural-language indication of user opt-in or justification for restricting the skill to Chinese, which can violate language/locale policy requirements.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
L075 的注释写明“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，这与该脚本和清单描述的专用用途——个税累计预扣计算表核对——不一致。代码后续的提示与帮助文本都要求输入个税表含表头，因此这里的“合同全文”示例会误导开发者对技能意图的理解。
- Content