Security audit
Security checks for vulnerabilities and agentic risk
Smith Matrix is a markdown-only coordination skill that creates a disclosed workspace task tree, with no evidence of hidden execution, exfiltration, or privilege escalation.
Before installing, expect this skill to create and retain a .smith-matrix directory containing task descriptions, outputs, and private agent notes. Avoid putting secrets or sensitive data into tasks unless you are comfortable with that data being stored in project files, and review generated artifacts before committing them.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
<!-- 原 Vue 2 Options API -->
<template>
<div class="order-list">
<el-table :data="orders">
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
---
name: Smith Matrix
description: This skill should be used when the user asks to "create a multi-agent system", "spawn agents for parallel tasks", "decompose task recursively", "set up agent matrix", or wants to execute complex tasks using multiple coordinated agents with conflict-free parallel processing.
version: 0.2.0
---
The skill title, overview, and usage instructions are written in Chinese, and the document provides no indication that users may choose another language. This can violate language/locale policy when a skill implicitly requires a specific language without opt-in or justification.
The file title and all instructional content are written exclusively in Chinese, with no indication that language selection is optional or that the skill is intended only for a Chinese-speaking or region-specific audience. Under the stated policy, forcing a single language without user opt-in is a natural-language policy concern.
This markdown file presents all user-facing instructions and examples exclusively in Chinese, which can amount to forcing a specific language without user opt-in. The policy allows locale constraints only when choice or clear justification is provided, neither of which appears in the file.
The file presents the skill content entirely in Chinese from the title onward, with no indication that language is optional or user-selectable. Under the policy rule for natural-language violations, forcing a specific language without opt-in can be a locale/language policy issue.
The document title and all operative instructions are presented only in Chinese, which imposes a language choice on users and implementers without any opt-in or alternative locale guidance. Under the language/locale policy check, this is a natural-language policy issue unless the file documents a justified region-specific constraint or offers language choice.
The entire skill is written as mandatory Chinese-language instructions and does not indicate that the agent may adapt to the user's preferred language. This creates a locale/language policy concern because it effectively imposes a specific language without user opt-in or a documented region-specific need.
The skill explicitly instructs the agent to create files and directory structures in the workspace, including inbox, outbox, children, and private areas, but provides no requirement to obtain user consent or clearly disclose that filesystem modifications will occur. In an agent skill that recursively spawns sub-agents and writes task artifacts, this can lead to unexpected workspace mutation, clutter, or accidental interference with existing files if paths or task IDs are mishandled.
该文档从标题到正文均以中文编写，未说明这是面向特定中文用户群体的限定文档，也未提供语言选择或英文替代说明。根据规则，若技能内容隐含强制特定语言而无用户选择或明确正当说明，可构成自然语言政策违规。