Back to skill

Security audit

Master Cloner

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language Markdown guide for building thinker-based AI skills and shows no hidden code, data access, persistence, or exfiltration behavior.

Install this if you want a Chinese-language workflow for designing AI skills around named thinkers or classic texts. Non-Chinese users should be aware it tells the agent to answer in Chinese, and users should keep generated decision-advisor skills scoped to the named thinker and avoid treating them as neutral general advice.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The instruction '所有输出使用中文' mandates a specific language for all outputs. This is a natural-language policy concern because it does not provide user opt-in or an alternative language choice, and no region-specific justification is given in the file.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

This markdown file is written entirely in Chinese and does not indicate that language selection is optional or limited to a justified Chinese-only context. Under the policy, language-specific behavior without user opt-in or explicit justification is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The file is entirely written in Chinese and presents its templates and required outputs in Chinese without indicating that the agent should adapt to the user's preferred language. This can cause the skill to override user language expectations, reducing usability, increasing misunderstanding risk, and potentially causing unsafe outcomes if users cannot accurately interpret instructions or disclosures.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The trigger conditions are broad enough to match common requests such as asking for advice, summaries, or domain application, which can cause the skill to activate outside its intended scope. In a skill that generates decision guidance rooted in a named thinker's framework, over-triggering can lead to inappropriate delegation, overly authoritative advice, or philosophical framing being applied where a neutral/general assistant response would be safer.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

This markdown file is entirely written as a prescriptive skill-testing template in Chinese, with no indication that language choice is optional or limited to a justified region-specific context. The policy requires flagging natural-language locale constraints when a specific language is forced without user opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

This markdown file consists solely of Chinese-language instructions and templates, with no indication that users may choose another language or locale. Under the policy rule for natural-language violations, forcing a specific language without user opt-in is reportable unless the locale constraint is clearly documented and justified.

Content

No source excerpt is available for this finding.