Smith Matrix

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 5:06 AM UTC
• Version: 0.1.3

Overview

Smith Matrix is a markdown-only coordination skill that creates a disclosed workspace task tree, with no evidence of hidden execution, exfiltration, or privilege escalation.

Before installing, expect this skill to create and retain a .smith-matrix directory containing task descriptions, outputs, and private agent notes. Avoid putting secrets or sensitive data into tasks unless you are comfortable with that data being stored in project files, and review generated artifacts before committing them.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Rogue Agent: Self-Modification, Session Persistence
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (10)

Hidden Instructions

High

• Category: Prompt Injection

Content

2. **关键组件重构示例**
   ```vue
   <!-- 原 Vue 2 Options API -->
   <template>
     <div class="order-list">
       <el-table :data="orders">

• Confidence: 70% confidence
• Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Session Persistence

Medium

• Category: Rogue Agent

Content

---
name: Smith Matrix
description: This skill should be used when the user asks to "create a multi-agent system", "spawn agents for parallel tasks", "decompose task recursively", "set up agent matrix", or wants to execute complex tasks using multiple coordinated agents with conflict-free parallel processing.
version: 0.2.0
---

• Confidence: 60% confidence
• Finding: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Natural-Language Policy Violations

Medium

• Confidence: 92% confidence
• Finding: The skill title, overview, and usage instructions are written in Chinese, and the document provides no indication that users may choose another language. This can violate language/locale policy when a skill implicitly requires a specific language without opt-in or justification.

Natural-Language Policy Violations

Medium

• Confidence: 92% confidence
• Finding: The file title and all instructional content are written exclusively in Chinese, with no indication that language selection is optional or that the skill is intended only for a Chinese-speaking or region-specific audience. Under the stated policy, forcing a single language without user opt-in is a natural-language policy concern.

Natural-Language Policy Violations

Medium

• Confidence: 96% confidence
• Finding: This markdown file presents all user-facing instructions and examples exclusively in Chinese, which can amount to forcing a specific language without user opt-in. The policy allows locale constraints only when choice or clear justification is provided, neither of which appears in the file.

Natural-Language Policy Violations

Medium

• Confidence: 83% confidence
• Finding: The file presents the skill content entirely in Chinese from the title onward, with no indication that language is optional or user-selectable. Under the policy rule for natural-language violations, forcing a specific language without opt-in can be a locale/language policy issue.

Natural-Language Policy Violations

Medium

• Confidence: 84% confidence
• Finding: The document title and all operative instructions are presented only in Chinese, which imposes a language choice on users and implementers without any opt-in or alternative locale guidance. Under the language/locale policy check, this is a natural-language policy issue unless the file documents a justified region-specific constraint or offers language choice.

Natural-Language Policy Violations

Medium

• Confidence: 88% confidence
• Finding: The entire skill is written as mandatory Chinese-language instructions and does not indicate that the agent may adapt to the user's preferred language. This creates a locale/language policy concern because it effectively imposes a specific language without user opt-in or a documented region-specific need.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill explicitly instructs the agent to create files and directory structures in the workspace, including inbox, outbox, children, and private areas, but provides no requirement to obtain user consent or clearly disclose that filesystem modifications will occur. In an agent skill that recursively spawns sub-agents and writes task artifacts, this can lead to unexpected workspace mutation, clutter, or accidental interference with existing files if paths or task IDs are mishandled.

Natural-Language Policy Violations

Low

• Confidence: 92% confidence
• Finding: 该文档从标题到正文均以中文编写，未说明这是面向特定中文用户群体的限定文档，也未提供语言选择或英文替代说明。根据规则，若技能内容隐含强制特定语言而无用户选择或明确正当说明，可构成自然语言政策违规。

Static analysis

No suspicious patterns detected.