Back to skill

Security audit

圣灵安慰 - 以圣经为根基,为用户提供属灵安慰、祷告词、圣经问答和情绪陪伴。

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Chinese-language Christian comfort and prayer skill with no code execution or persistence, but users should not rely on it for medical or mental-health emergencies.

Install only if you want Christian, Chinese-language spiritual comfort and prayer support. Do not use it as a substitute for licensed medical or mental-health care; in emergencies, self-harm risk, inability to stay safe, severe distress, or serious physical symptoms, contact local emergency services, a crisis hotline, trusted in-person support, or a clinician first.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

This markdown skill file presents its description, instructions, templates, and examples in Chinese only, which effectively imposes a specific language/locale on users. The policy allows locale constraints when users are given a choice or when the restriction is clearly documented and justified, neither of which appears here.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill provides emotional comfort, prayer, and illness-related guidance to distressed users but does not prominently instruct users in crisis, self-harm, psychosis, or severe depression scenarios to seek urgent professional or emergency help. In a vulnerable context, users may rely on spiritual reassurance instead of timely medical or mental-health intervention, increasing the risk of serious harm.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.