Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
增值税进项税额认证与抵扣核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This is a local Chinese VAT reconciliation checker with no network or persistence, though users should note the free version omits several checks and has one overbroad disclaimer.
Install only if you need a local checker for this Chinese VAT reconciliation table and understand the Chinese output. Do not treat the free version as a full tax-compliance review; rely on the listed executed checks and checks_not_run, and verify omitted tax-rate and eligibility checks separately.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The file’s user-facing natural-language documentation and messages are entirely in Chinese, including operational instructions and outputs, with no indication that the skill is region-specific or that users can opt into another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
- Content
Intent-Code Divergence
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The disclaimer claims the tool checks both reconciliation and tax-rate brackets, but the free-version code never performs a tax-rate bracket validation. This can mislead users into believing a control was executed when it was not, creating a false sense of assurance in a tax/compliance workflow where omitted checks can let reporting errors pass unnoticed.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
All user-facing documentation, usage text, prompts, and outputs in this file are written exclusively in Chinese, with no indication that another language can be selected. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
L075 的注释称“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，暗示该入口可处理合同全文等更广泛材料。但从 manifest、USAGE 以及后续不足材料提示看，此技能实际只针对“进项税额认证与抵扣对照表（含表头）”进行核对，合同全文并非其声明能力范围。
- Content