Ae4
Medium
- Category
- analysis-evasion
- Confidence
- 80% confidence
- Finding
Suspicious Unicode normalization or mixed-script content
- Content
Security audit
统计假设检验技能
Security checks for vulnerabilities and agentic risk
Overview
This is a disclosed local statistics-testing helper that reads user-provided data and optionally writes JSON results, with no evidence of hidden, persistent, networked, or destructive behavior.
Install only if a Chinese-language statistical testing CLI fits your workflow. Provide only intended data files as inputs, and use the optional output path carefully because it writes results wherever the agent is allowed to write.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)
Undeclared Tool Scope
Medium
- Category
- MCP Least Privilege
- Confidence
- 88% confidence
- Finding
The skill instructs use of local files such as CSV/TXT/Excel inputs and JSON output, which implies file read/write behavior, but it does not declare any explicit tool scope or permission boundaries. In an agent environment, this can lead to overbroad filesystem access, making it easier for the agent or backing script to read unintended files or write outputs to unsafe locations.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The skill metadata and entire user-facing documentation are presented only in Chinese, and the TRACE section explicitly states it supports Chinese interaction. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly justified, which is not provided here.
- Content
Description-Behavior Mismatch
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
Manifest描述聚焦于统计检验、自动计算统计量/p值/置信区间/效应量以及结果解释，没有提及文件输出或持久化能力。代码通过
--output参数将结果写入用户指定路径，这超出了“检验工具”本身的已声明行为范围。- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The file title and entire guide are written in Chinese, with no indication that language choice is optional or that the document is region-specific. Under the policy rule, content that imposes a specific language without user opt-in is a natural-language policy concern.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
This code file contains natural-language descriptions and user-facing text exclusively in Chinese, including the module docstring and later CLI/help/output strings. That can violate a language-choice policy when the skill does not offer users any language or locale selection or document that it is intentionally region-specific.
- Content
Static analysis
No suspicious patterns detected.