Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Security audit
学费与退费核对（免费版）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local Chinese-language tuition refund checker whose code matches its stated purpose and does not show network use, persistence, credential access, or hidden behavior.
Install this only if you want a Chinese-language local checker for tuition refund tables. It can read the input file you point it at and run local Node code, but the inspected package does not send data out, install dependencies, or make legal/business judgments beyond the listed arithmetic checks.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/run.mjs --sample # 先看样例
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The skill advertises trigger phrases such as 退费核对、学费核算、课时折算、教培财务, which are broad business/finance terms rather than narrowly scoped invocation cues. In an agent ecosystem, overly broad triggers can cause accidental activation on ordinary finance discussions, routing sensitive tuition or refund data into this skill when the user did not clearly intend to invoke it.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The file’s natural-language interface, examples, labels, and user-facing advice are entirely in Chinese, including the stated contract and insufficient-input messages. There is no indication that the skill offers a language choice or that the Chinese-only constraint is explicitly justified as a region-specific tool, which can violate language/locale policy requirements.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 78% confidence
- Finding
The primary display name, summary, and descriptions are written in Chinese, and the operational guidance in the markdown body is also Chinese. While an English description exists on L13, the skill does not state that users can choose their preferred language for interaction or output, which may impose a language default without opt-in.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The JSON template's only natural-language content is in Chinese, which implicitly constrains the skill output or example data to a specific language. There is no indication that users can choose another language or that the locale restriction is justified, which matches the language/locale policy-violation category.
- Content