Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
模具与工装摊销核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local Chinese-language ledger checker that reads user-provided amortization table data and prints deterministic findings without network use, persistence, or credential access.
Install only if you are comfortable using a Chinese-language local CLI for mold/tooling amortization ledger checks. The package appears to run locally with no network calls or persistence, but you should still treat the input as sensitive business/accounting data and review outputs before relying on them for financial decisions.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The file’s natural-language comments and user-facing explanatory strings are written entirely in Chinese, including usage guidance and disclaimer text. This creates an implicit locale requirement without offering the user any language choice or documenting a justified region-specific constraint.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The user-facing description, usage text, errors, and output messages are entirely in Chinese, and the file does not indicate that the skill is region-specific or that another language is available on request. This creates a natural-language policy concern because it effectively imposes a specific language without user opt-in.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The inline documentation states that non-JSON input will be treated as plain-text material such as '直接粘贴的合同全文', which contradicts the rest of the script's stated purpose of checking mold/tool amortization ledgers. The actual behavior accepts arbitrary plain text, but the specific documentation example points to unrelated contract-text processing intent.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The JSON template contains only Chinese column headers and values, which enforces a specific language/locale in the skill artifact. Under the policy, locale-specific behavior should either offer user choice or be clearly documented and justified as region-specific.
- Content