Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
税务风险指标自查核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This is a local Chinese tax self-check helper that reads a user-provided table, runs bundled deterministic checks, and does not show hidden network, persistence, or credential behavior.
Install only if you are comfortable with a Chinese-language, local-only tax table checker. Treat it as a free subset: it performs the listed arithmetic and consistency checks, but it does not run the reference-rate and retained-credit checks listed as withheld, despite one stale disclaimer line in the engine output.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (7)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
This JavaScript file contains all user-facing descriptions, guidance, and disclaimers exclusively in Chinese, indicating the skill is designed to operate in a fixed language. The file does not offer any language choice or opt-in, which is a natural-language locale policy concern under the stated rules.
- Content
Intent-Code Divergence
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
L364-L366 的 disclaimer 明确表示结果还包括“按参考税率推算的偏离提示”，对应上文注释中的收入/销项、成本/进项等参考口径检查。但本文件实际只执行免费档 6 项检查，且 L318-L319 还把这些参考检查列入 checks_not_run，因此文档表述与实际行为直接矛盾。
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
All user-facing documentation, usage text, errors, and output strings in this skill are written exclusively in Chinese, with no indication that the user can choose another language. That creates a language/locale constraint in natural-language behavior without documented opt-in or justification as a region-specific compliance requirement.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
The docstring says non-JSON input will be treated as '直接粘贴的合同全文', which contradicts the rest of the file that consistently expects a tax-risk indicator self-check table with headers. The actual behavior is generic text fallback, but the inline documentation specifically names a different document type, creating an intent/documentation mismatch.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The only natural-language content in this manifest-style JSON value is Chinese, which implies the skill is constrained to a specific language/locale. There is no accompanying opt-in, user choice, or justification that this is a region-specific tool, so it may violate the language/locale policy for natural-language behavior.
- Content