Security audit

Ai Evolution Engine V2

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Chinese-language AI self-improvement helper whose shipped scripts mainly print guidance, with no observed hidden execution, exfiltration, persistence, or destructive behavior.

Install only if you are comfortable with a Chinese-language skill focused on agent self-improvement. Before allowing any future version or workflow to update MEMORY.md, knowledge/, AGENTS.md, SOUL.md, or install new skills, require explicit confirmation, review the exact paths and sources, and keep rollback information.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (7)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The skill explicitly describes automated evolution actions that update knowledge/configuration files and install new skills, but it does not clearly warn that these actions can change local files, alter agent behavior, or introduce new code into the environment. In a self-modifying agent skill, lack of explicit disclosure and guardrails increases the risk of unintended persistence, configuration drift, or installation of untrusted components.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The package description is written only in Chinese, which indicates a language-specific presentation without any opt-in, alternative locale, or justification that the skill is region-specific. This can violate natural-language policy expectations when users are not given a language choice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: This code presents all user-facing text in Chinese, including headings, status messages, and recommendations, with no option to select another language. That creates a natural-language policy concern because it forces a locale/language choice without user opt-in or a stated region-specific requirement.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The script's title, status messages, and learning content are presented in Chinese throughout, with no user opt-in or configurable locale. This creates a natural-language policy concern because it forces a specific language for all users rather than offering a choice or documenting a region-specific requirement.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The manifest description is written entirely in Chinese and does not indicate that other languages are supported or that Chinese is a required locale for the skill. Under the language/locale policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The core descriptive text for the skill is Chinese-only while the file title is English, and there is no note allowing users to choose their preferred language. This can create an implicit language restriction without opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This code file contains multiple user-facing strings exclusively in Chinese, including the title, status messages, and recommendation text. Under the policy rule for natural-language violations, forcing a specific language without user opt-in is a reportable issue when no alternative locale handling or justification is present.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.