Security audit

ISO 45001职业健康技能

Security checks for vulnerabilities and agentic risk

Overview

This is a static Chinese-language ISO 45001 guidance skill with no executable code, network behavior, credential handling, or persistence.

Install this if you want Chinese-language ISO 45001/OH&S planning templates and guidance. Treat the legal and standards references as starting points and verify current regulatory requirements with a qualified compliance professional before relying on them for certification or workplace safety decisions.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Tp2

High

Category: MCP Tool Poisoning
Confidence: 85% confidence
Finding: Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.

Intent-Code Divergence

Low

Confidence: 90% confidence
Finding: L213 的说明将该技能描述为具备异常处理与明确输出格式的实现特征，但全文内容只是 ISO 45001 体系策划说明文档和示例，并无对应的代码流程或异常处理机制。这属于文档对实现能力的主动表述与实际内容不符，而非单纯信息缺失。

Natural-Language Policy Violations

Low

Confidence: 90% confidence
Finding: The title and the entire document are written in Chinese, which effectively fixes the skill content to a specific language. Under the policy criteria, a locale or language restriction should either be optional for the user or explicitly justified as region-specific.

Natural-Language Policy Violations

Low

Confidence: 86% confidence
Finding: This markdown file contains user-facing natural language only in Chinese, and nowhere indicates that the skill or reference is region-specific or that another language is available on request. Under the language/locale policy criterion, forcing a specific language without user opt-in can be a policy violation.

Natural-Language Policy Violations

Low

Confidence: 89% confidence
Finding: This markdown file is entirely written in Chinese, beginning with the title at L001, and nowhere indicates that the language is optional or limited to a China-specific audience. Under the language/locale policy rule, a skill should not implicitly force a specific language unless it offers opt-in or clearly documents a justified regional constraint.

Static analysis

No suspicious patterns detected.