Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
增值税附加税费核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This local VAT surtax checker is coherent and purpose-aligned, with no evidence of network use, persistence, credential access, or hidden behavior.
Install only if you intend to review Chinese VAT surtax worksheet text locally. Do not treat the output as tax advice: the free version explicitly omits several checks, including some rate and policy validations.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (7)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The trigger phrase list includes broad tax-related terms such as '城建税' and '教育费附加' that users may mention in ordinary discussion, which can cause the skill to invoke unintentionally. While this is not code-execution risk, over-broad activation can route users into the wrong workflow, create confusion, and increase the chance that sensitive financial documents are processed by an unintended skill.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The file’s natural-language description, examples, and user-facing advice are entirely in Chinese, including the contract and error/advice text returned to users. There is no indication that the skill supports language choice or that the Chinese-only constraint is a documented, justified locale restriction.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The user-facing docstring, usage text, prompts, and output messages are entirely in Chinese, and the file does not offer any language selection or opt-in. Under the policy rule, forcing a specific language without user choice is a natural-language policy violation unless the locale constraint is clearly documented and justified.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 77% confidence
- Finding
The visible skill name, summary, description, and trigger wording are presented primarily in Chinese, with the operational guidance centered on Chinese-language usage. While an English description exists, the user-facing invocation cues do not offer a language choice or state that Chinese is optional.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
L075 的注释写明“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，但该技能的清单与其余文档都明确限定在附加税费计算表/附加税核对场景。这里不是单纯信息缺失，而是用一个不同业务文档类型来描述本技能输入，容易误导开发者对技能意图和适用范围的理解。
- Content