Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
应收账款催收计划与回款核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local, deterministic checker for a Chinese accounts-receivable table and does not show hidden network, persistence, credential, or data-changing behavior.
Install only if you are comfortable using a Chinese-language local checker for accounts-receivable table data. Treat the input as potentially sensitive financial information, but the reviewed artifact processes it locally and does not show network transmission or modification of your records.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (6)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
This skill’s natural-language instructions, required input guidance, and result text are written in Chinese only, beginning with the top-level file documentation. The policy category covers language or locale constraints, and the file does not offer any user option to select another language or explicitly justify a Chinese-only scope.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The user-facing description, usage, prompts, and outputs are entirely in Chinese, and there is no indication that users may choose another language or that the skill is limited to a Chinese-only deployment context. Under the policy, forcing a specific language without opt-in is a natural-language policy concern.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The JSON template consists entirely of Chinese column headers and sample values, which imposes a specific language/locale in the skill content. Under the policy, locale-specific language is only acceptable when the skill offers user choice or clearly documents a justified regional constraint, neither of which is present in this file.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The primary display name, summary, tags, and main description are all in Chinese, and the English description still references the Chinese table name rather than clearly offering an English-localized experience. This suggests a language-specific skill experience without explicit user opt-in or a documented locale restriction.
- Content