Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
电商平台结算核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill locally checks Chinese e-commerce settlement-sheet arithmetic and does not show hidden network, credential, persistence, or destructive behavior.
Install this only if you want a local Node-based checker for Chinese-format platform settlement sheets. It does not appear to send data out or persist anything, but users should understand the free version omits the listed advanced checks and expects copied text with recognizable headers rather than .xlsx files.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
This skill’s natural-language interface is entirely in Chinese, including the contract description, sample input headers, insufficiency advice, and result messages. Because the file does not offer any language/locale opt-in or state that it is intentionally limited to a China-specific audience, it can violate the policy against forcing a specific language without user choice.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The user-facing description, usage text, errors, and output strings are entirely in Chinese, which imposes a specific language on users without any opt-in or alternative locale. The policy explicitly calls out language or locale constraints as violations unless the skill offers user choice or clearly documents a justified regional restriction.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The inline documentation for loadInput says non-JSON input is handled as plain-text material such as a 'directly pasted full contract'. That contradicts the surrounding manifest and script documentation, which consistently describe this skill as operating on platform settlement statements with headers, not generic contract documents.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The JSON sample text is entirely in Chinese and provides no indication that language selection is optional or tied to a documented region-specific requirement. This can violate language/locale policy when a skill or template implicitly forces a specific language for users without opt-in.
- Content