Tp2
High
- Category
- MCP Tool Poisoning
- Confidence
- 85% confidence
- Finding
Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.
- Content
Security audit
ISO 45001职业健康技能
Security checks for vulnerabilities and agentic risk
Overview
This is a static Chinese-language ISO 45001 guidance skill with no executable code, network behavior, credential handling, or persistence.
Install this if you want Chinese-language ISO 45001/OH&S planning templates and guidance. Treat the legal and standards references as starting points and verify current regulatory requirements with a qualified compliance professional before relying on them for certification or workplace safety decisions.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)
Intent-Code Divergence
Low
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
L213 的说明将该技能描述为具备异常处理与明确输出格式的实现特征，但全文内容只是 ISO 45001 体系策划说明文档和示例，并无对应的代码流程或异常处理机制。这属于文档对实现能力的主动表述与实际内容不符，而非单纯信息缺失。
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The title and the entire document are written in Chinese, which effectively fixes the skill content to a specific language. Under the policy criteria, a locale or language restriction should either be optional for the user or explicitly justified as region-specific.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 86% confidence
- Finding
This markdown file contains user-facing natural language only in Chinese, and nowhere indicates that the skill or reference is region-specific or that another language is available on request. Under the language/locale policy criterion, forcing a specific language without user opt-in can be a policy violation.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 89% confidence
- Finding
This markdown file is entirely written in Chinese, beginning with the title at L001, and nowhere indicates that the language is optional or limited to a China-specific audience. Under the language/locale policy rule, a skill should not implicitly force a specific language unless it offers opt-in or clearly documents a justified regional constraint.
- Content