Back to skill

Security audit

长篇小说架构师 | Serial Novel Architect

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese long-form fiction planning skill with no executable code, network behavior, credential handling, or persistence.

Install this if you want a Chinese-language assistant for long-form novel planning and serial fiction workflows. Expect it to prefer Chinese output and fiction-project organization patterns; review before using it for non-Chinese writing or unrelated Markdown project work.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The file presents the skill as a Chinese novel-planning/writing skill and explicitly states it is a '完整的中文长篇小说策划与写作技能', which imposes a language constraint in natural-language instructions. There is no indication that users may choose another language or opt into the Chinese-only behavior.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The display name, description, and default prompt are all written in Chinese, which can impose a language preference without indicating user opt-in or a justified region-specific constraint. This may violate language or locale policy where users are expected to retain choice over interaction language.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The skill enables implicit invocation while its description and default prompt cover a broad class of writing tasks, without documented guardrails that narrowly constrain when it should auto-activate. This can cause the agent to invoke the skill in situations the user did not clearly intend, increasing the chance of inappropriate context capture, confusing behavior, or accidental application of the skill to unrelated prompts.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

该文件全文以中文编写,未说明这是面向中文用户的限定场景,也未提供语言选择或可切换说明。按规则,强制特定语言而无用户选择可能构成语言/区域策略违规。

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.