Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
租金账单与押金结算核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local Chinese-language rent worksheet checker with disclosed scope and no evidence of network use, persistence, credential access, or hidden behavior.
Install only if you want a local Node-based checker for Chinese rent bill or lease settlement worksheet text. It does not appear to send data out or persist anything, but you should review financial results manually because the free version explicitly omits several checks and does not provide legal, tax, or contract advice.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (8)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The primary display names, summaries, descriptions, and usage guidance are written in Chinese, while the English description is minimal and does not offer a language choice for user interaction. This creates a language policy concern because the skill appears oriented to a single language without explicitly letting the user opt into that locale.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The skill description lists trigger phrases such as “租金核对” and “租赁结算” without defining the exact scope, required context, or situations where the skill should not activate. These phrases are relatively broad business terms and the file provides no negative examples or invocation constraints to reduce unintended activation collisions.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The file’s natural-language interface, examples, field labels, advice, and returned user-facing messages are all written in Chinese, and the parser expects Chinese column names such as “合同月租金” and “期末欠租”. There is no indication that users may choose another language or that the locale restriction is explicitly documented as a justified region-specific constraint.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The JSON content consists entirely of Chinese-language labels and tenant names, indicating a fixed language/locale assumption. Under the policy, hard-coding a specific language without user opt-in or documented regional justification is a natural-language policy violation.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The natural-language interface, help text, and user-facing messages are all presented in Chinese, and the file does not offer an alternative language or ask the user to opt into this locale. Under the policy, forcing a specific language without user choice is a natural-language policy concern.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 86% confidence
- Finding
L075 的注释写明“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，这与该技能围绕租金账单/租赁结算表逐项核对的用途不一致。代码虽然后续仍交给引擎处理，但该注释主动暗示接受合同全文这一不同类型材料，和技能宣称的输入范围形成意图层面的矛盾。
- Content