Security audit

实收资本与股东出资核对（免费版）

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local, purpose-aligned checker for shareholder paid-in capital tables and does not show hidden networking, persistence, credential use, or destructive behavior.

Install only if you are comfortable running a local Node-based checker on shareholder contribution table text. It is not a legal, audit, bank-record, tax, or corporate-registry verification tool, and the free version explicitly omits several checks listed in the skill documentation.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Ae1

High

Category: analysis-evasion
Content: node scripts/run.mjs --sample # 先看样例
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected

Ae1

High

Category: analysis-evasion
Content: node scripts/run.mjs --sample # 先看样例
Confidence: 100% confidence
Finding: Referenced artifact was not completely inspected

Natural-Language Policy Violations

Medium

Confidence: 97% confidence
Finding: The file’s user-facing comments and operational descriptions are entirely in Chinese, including the usage guidance and warnings, with no indication that another language is supported or that Chinese is required for a region-specific compliance purpose. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.

Natural-Language Policy Violations

Low

Confidence: 93% confidence
Finding: The natural-language interface, usage text, status messages, and help content are all written exclusively in Chinese, with no indication that users may choose another language. Under the policy rule, forcing a specific language without opt-in is a locale/language policy concern.

Intent-Code Divergence

Low

Confidence: 92% confidence
Finding: L075 的注释写道“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，但该脚本其余帮助文本与清单都明确要求输入股东出资明细表，且材料不足时也会拒绝给结论。这里的内联文档暗示可处理“合同全文”，与技能声明的单一用途形成主动性误导。

Static analysis

No suspicious patterns detected.