Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
课时消耗与教师课时费核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local spreadsheet-checking tool for teacher hour pay data, and its file/script access is consistent with that purpose.
Install only if you are comfortable running a local Node script on copied teacher hour/pay table data. It does not appear to send data out or persist anything, but its conclusions are limited to arithmetic and table consistency checks and should not be treated as legal, payroll-policy, attendance, or contract validation.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Intent-Code Divergence
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The header comment says the complete paid implementation is concentrated between the marker and
function run(payload), and that the free package removes that whole block. In this file, the section between the marker andrunonly defines the free checks explicitly labeled as free-tier logic, so the documentation actively misdescribes what that code region contains.- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The JSON sample contains only Chinese headers and values in a way that implies a fixed language/locale for the skill's data representation. Under the policy, forcing a specific language without user opt-in or documented justification is a natural-language policy violation.
- Content
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
L075 的注释写明“不是 JSON 就当作纯文本材料（例如直接粘贴的合同全文）”，但该技能的清单、帮助文本和其余代码都表明它面向的是课时消耗与教师课时费明细表，而不是合同全文。这里不是单纯信息缺失，而是文档示例把输入材料类型说成了另一类业务对象，容易误导开发者对技能意图的理解。
- Content