Ae1
High
- Category
- analysis-evasion
- Content
node scripts/run.mjs --sample # 先看内置样例（一张干净台账，0 命中）
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Security audit
分包商资质与安全许可核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This is a local offline checker for subcontractor qualification tables, with no evidence of hidden network, credential, write, or persistence behavior.
Install only if you are comfortable using a Chinese-language offline CLI and providing subcontractor register data as text or JSON. Mask company and certificate identifiers as the documentation recommends, and do not treat its output as legal, regulatory, or document-authenticity verification.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (8)
Ae1
High
- Category
- analysis-evasion
- Content
node scripts/run.mjs --sample # 先看内置样例（一张干净台账，0 命中）
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Ae1
High
- Category
- analysis-evasion
- Content
node scripts/run.mjs --sample # 先看内置样例（一张干净台账，0 命中）
- Confidence
- 100% confidence
- Finding
- Referenced artifact was not completely inspected
Lp1
High
- Category
- MCP Least Privilege
- Confidence
- 75% confidence
- Finding
- The skill uses 'env' capability that is not listed in its permissions. This may indicate deceptive intent or missing permission declarations.
Natural-Language Policy Violations
Medium
- Confidence
- 89% confidence
- Finding
- The user-facing instructions and operational guidance in the markdown are entirely in Chinese, while the file provides no markdown-level option for users to choose another language. Although there is a brief English metadata description, the actual usage, warnings, and constraints are presented only in Chinese, which creates a locale/language policy concern for users who have not opted into that language.
Natural-Language Policy Violations
Medium
- Confidence
- 92% confidence
- Finding
- The file’s natural-language instructions, warnings, contract text, and user-facing messages are all presented in Chinese. For a general-purpose skill file, this effectively forces a specific language/locale on users without opt-in, which matches the language policy violation category.
Natural-Language Policy Violations
Low
- Confidence
- 96% confidence
- Finding
- The user-facing description, usage text, prompts, and status messages are entirely in Chinese, with no indication that other languages are supported or that the user can opt into a preferred locale. Under the policy for natural-language constraints, forcing a specific language without user choice is a locale-policy issue.
Natural-Language Policy Violations
Low
- Confidence
- 93% confidence
- Finding
- This JSON sample embeds all user-facing text and field labels in Chinese, with no indication that the skill supports other languages or that Chinese is an explicit user-selected locale. Under the stated policy, forcing a specific language without opt-in is a natural-language policy concern.
Static analysis
No suspicious patterns detected.