Security audit

政府采购评审专家数字分身

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Chinese government-procurement evaluation assistant with no executable behavior or hidden access.

Before installing, treat the skill as China government-procurement guidance rather than legal advice. Check that any ima knowledge bases are actually available, verify cited law and local rules for the specific project, and consult a qualified professional for high-stakes procurement disputes.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Natural-Language Policy Violations

Medium

Confidence: 88% confidence
Finding: The manifest description and the entire usage guidance are written exclusively in Chinese and present the skill as operating in that language context, but nowhere does the file state that users may choose another language. Under the policy, language constraints should either be optional/opt-in or explicitly justified as region-specific; this file does not provide that opt-in framing.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: The title and role setup are entirely specified in Chinese and frame the skill as producing expert answers under that language context, with no indication that users may choose another language. This creates a natural-language policy concern because the skill appears to enforce a specific language/locale without opt-in or an explicit region-specific justification in the file.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.