Back to skill

Security audit

中文言外之意解码器

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese dialogue interpretation skill with no code execution, persistence, credential use, or hidden data flows; its risks are mainly around overconfident interpersonal advice.

Install this if you want help interpreting Chinese conversation subtext, but treat outputs as subjective social readings rather than facts, especially for relationships, work disputes, legal issues, or major decisions. Provide only conversation text you are comfortable sharing with the agent.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The trigger list includes broad phrases like '她什么意思' and '帮我分析这段对话' that can appear in ordinary conversation and may cause unintended invocation. Over-broad routing can expose user content to the wrong skill, leading to privacy issues, misclassification, or use of a manipulative interpretation mode in contexts where the user did not explicitly request it.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

Early instructions say that when information is insufficient, the skill should stop and ask follow-up questions rather than speculate, implying a high-confidence interpretation standard. However, the mandatory closing disclaimer says '以上全凭你发的这几句话脑补' and '准不准还得你自己拍板,' which characterizes every output as conjectural even when the earlier workflow says sufficient context has been established. This is an intent-level contradiction within the documentation.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill instructs the agent to produce a definitive '确定结论' and avoid '可能也许' wording in the structured output. But later it states that interpretation is '概率性洞察, 不是事实断定' and even mandates a disclaimer saying the result is based on limited text and may be inaccurate. These instructions conflict on the intended certainty level of the skill's output.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The entire file is written as Chinese-only guidance and explicitly frames interpretation through a '中式语境' lens, which imposes a specific language/cultural locale without any opt-in or alternative-language support. Under the policy, locale-specific behavior should either offer user choice or be clearly documented as a justified regional constraint.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
81% confidence
Finding

The description and title define the skill exclusively around interpreting Chinese dialogue and expressions, but do not explicitly frame this as a user-selected language/locale specialization or offer alternatives. This can be a language-policy issue when a skill imposes a specific language context without clear opt-in or justification.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.