Security audit

投标模拟评标 · 评标表逆向工程Bid Mock Evaluation 1.0.0

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Chinese procurement bid-review assistant that processes user-provided tender materials locally, with no evidence of hidden execution, exfiltration, or persistence.

Install only if you intend to analyze Chinese procurement or tender materials. Before using it with real bid documents, confirm you are authorized to process them with an AI assistant and redact confidential, personal, or competitively sensitive information where possible. Treat legal and scoring outputs as self-check guidance and verify current law and final bid decisions with qualified professionals.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (13)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 70% confidence
Finding: Without declared permissions the skill's intent is opaque and cannot be validated.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The skill name, description, role instructions, outputs, and user interaction guidance are entirely specified in Chinese and assume a Chinese legal/procurement context. There is no opt-in or alternative language choice, which is a natural-language locale policy concern under the rule for forced language without user choice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 86% confidence
Finding: This JSON contains natural-language strings for factors and standards entirely in Chinese, such as at L04-L06 and similar entries throughout the file. Under the language/locale policy rule, forcing a specific language without opt-in or an explicit documented regional justification can be a policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The file is entirely written in Chinese, beginning with a Chinese-only title and continuing with Chinese-only instructions and evaluation content. Under the policy rule, a skill artifact that forces a specific language without user opt-in or an explicitly justified region-specific constraint is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The manifest’s user-facing description appears to require a specific language/locale by presenting all functionality only in Chinese. Under the policy, forcing a language without offering user choice or documenting a justified locale constraint is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The entire skill file is written as a prescriptive methodology in Chinese, with no indication that users may choose another language or locale. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown template appears to force a specific language/locale for the skill output through its headings, labels, and instructional text. Under the policy, language constraints should either be optional for the user or clearly justified as region-specific; neither is stated here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The template content is entirely in Chinese, including the title and all report sections, which implies the skill produces output in a fixed language. There is no indication that users can choose their preferred language or that the Chinese-only format is required for a documented region-specific purpose.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The entire skill file is written as Chinese-only test cases and repeatedly specifies expected outputs and review artifacts in Chinese, with no indication that users may choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is explicitly justified.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 78% confidence
Finding: The README content, headings, and usage guidance are all presented in Chinese, and there is no indication that users may choose another language or that the skill is intentionally restricted to a Chinese-language or China-specific audience. This can constitute a language/locale policy issue when a skill implicitly forces a language without explicit opt-in or justification.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The quick-start instructions tell users to extract contents from eval_table.docx and response.docx and then hand the resulting files to the LLM, which implies transmitting potentially sensitive procurement and bid-response data. The README does not include any privacy or confidentiality warning about reviewing, redacting, or handling sensitive information before using the skill.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 85% confidence
Finding: This JSON file contains all user-facing evaluation factors and standards in Chinese, but provides no indication that the skill is region-specific or that users may opt into this locale. Under the policy, forcing a specific language without user choice or documented justification can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The entire template is written as a fixed Chinese-language report and provides no indication that users may choose another language or locale. Under the policy rules, a skill should not force a specific language unless it is explicitly optional or clearly justified as region-specific.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.