ISO17025审核技能

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 10:17 AM UTC
• Version: 0.1.0

Overview

This is a markdown-only ISO17025/CNAS audit assistant with disclosed, purpose-aligned behavior, though users should limit sensitive lab or customer data they provide.

Install only if you need Chinese CNAS/ISO17025 audit assistance. Provide excerpts or redacted copies where possible, and remove customer names, sample identifiers, signatures, contact details, equipment serial numbers, and other confidential records unless sharing them is authorized.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (48)

Tp2

High

• Category: MCP Tool Poisoning
• Confidence: 85% confidence

Finding

Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.

Content

No source excerpt is available for this finding.

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/CNAS-CL01-2018_检测和校准实验室能力认可准则_.md (reported line 8)May include surrounding context.

md

# CNAS-CL01-2018 《检测和校准实验室能力认可准则》

<!-- Page 1 -->

2018 年03 月01 日发布                                                  2018 年09 月01 日实施

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/CNAS-CL01-2018_检测和校准实验室能力认可准则_.md (reported line 8)May include surrounding context.

md

# CNAS-CL01-2018 《检测和校准实验室能力认可准则》

<!-- Page 1 -->

2018 年03 月01 日发布                                                  2018 年09 月01 日实施

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/CNAS-R01_2023认可标识使用和认可状态声明规则.md (reported line 8)May include surrounding context.

md

# CNAS-R01：2023认可标识使用和认可状态声明规则

<!-- Page 1 -->

CNAS-R01
认可标识使用和认可状态声明规则

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

触发条件仅依赖“内部审核、文件审核、审核清单、不符合项、审核报告”等宽泛关键词，可能在不适当上下文中自动激活技能，并引导用户上传体系文件、审核发现或内部记录。该技能处理的往往是实验室内部管理文档，误触发会扩大敏感信息暴露面，并增加错误适用的风险。

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

技能明确要求用户提供实验室体系文件和审核发现，但未提示这些材料可能包含受控文件、客户信息、检测数据、设备资产信息、签名记录或内部缺陷信息。对于实验室审核场景，这类文档通常具有较高敏感性，缺少最基本的数据最小化、脱敏和授权提示，容易导致不必要的敏感信息泄露。

Content

No source excerpt is available for this finding.

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/CNAS-CL01-2018_检测和校准实验室能力认可准则_.md (reported line 92)May include surrounding context.

md

A.3 证明计量溯源性 ....................................................... 29
附录B（资料性附录）管理体系方式 ............................................ 31
参考文献.................................................................... 33

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 81% confidence

Finding

This markdown file is almost entirely presented in Chinese, with no statement that the language choice is optional or limited to a China-specific audience. Under the policy rule for natural-language content, forcing a specific language without user opt-in can be a locale-policy concern unless the constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence

Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence

Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence

Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/CNAS-GL032_2018_能力验证的选择核查与利用指南_.md (reported line 79)May include surrounding context.

md

2018 年3 月1 日 发布                                                      2018 年3 月1 日 实施
附录F 能力统计量的计算 ........................................... 44
参考资料 ......................................................... 50

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/CNAS-GL032_2018_能力验证的选择核查与利用指南_.md (reported line 2351)May include surrounding context.

md

*
x
-（见表6）。

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 80% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/CNAS-GL032_2018_能力验证的选择核查与利用指南_.md (reported line 3072)May include surrounding context.

md

划可考虑在后续能力验证计划中是否修正设计方案。若差值大到足以影响能力评
定或表明参加者使用的测量方法间存在严重偏倚，需在能力验证计划的报告说明，
如果出现这种情况，在后续设计能力验证计划时，需考虑该差值。

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence

Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence

Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/CNAS-GL046_2020_化学检测仪器核查指南_.md (reported line 179)May include surrounding context.

md

<!-- Page 7 -->

CNAS-GL046:2020                                                                                                                         第6 页 共16 页
2020 年12 月24 日发布                                                                                                               2020 年12 月24 日实施
附录
常用化学检测仪器核查建议表

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/CNAS-GL046_2020_化学检测仪器核查指南_.md (reported line 253)May include surrounding context.

md

<!-- Page 7 -->

CNAS-GL046:2020                                                                                                                         第6 页 共16 页
2020 年12 月24 日发布                                                                                                               2020 年12 月24 日实施
附录
常用化学检测仪器核查建议表

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/CNAS-GL046_2020_化学检测仪器核查指南_.md (reported line 307)May include surrounding context.

md

<!-- Page 7 -->

CNAS-GL046:2020                                                                                                                         第6 页 共16 页
2020 年12 月24 日发布                                                                                                               2020 年12 月24 日实施
附录
常用化学检测仪器核查建议表

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/CNAS-GL046_2020_化学检测仪器核查指南_.md (reported line 359)May include surrounding context.

md

<!-- Page 7 -->

CNAS-GL046:2020                                                                                                                         第6 页 共16 页
2020 年12 月24 日发布                                                                                                               2020 年12 月24 日实施
附录
常用化学检测仪器核查建议表

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/CNAS-GL046_2020_化学检测仪器核查指南_.md (reported line 452)May include surrounding context.

md

<!-- Page 7 -->

CNAS-GL046:2020                                                                                                                         第6 页 共16 页
2020 年12 月24 日发布                                                                                                               2020 年12 月24 日实施
附录
常用化学检测仪器核查建议表

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/CNAS-GL046_2020_化学检测仪器核查指南_.md (reported line 540)May include surrounding context.

md

<!-- Page 7 -->

CNAS-GL046:2020                                                                                                                         第6 页 共16 页
2020 年12 月24 日发布                                                                                                               2020 年12 月24 日实施
附录
常用化学检测仪器核查建议表

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/CNAS-GL046_2020_化学检测仪器核查指南_.md (reported line 618)May include surrounding context.

md

<!-- Page 7 -->

CNAS-GL046:2020                                                                                                                         第6 页 共16 页
2020 年12 月24 日发布                                                                                                               2020 年12 月24 日实施
附录
常用化学检测仪器核查建议表

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/CNAS-GL046_2020_化学检测仪器核查指南_.md (reported line 705)May include surrounding context.

md

<!-- Page 7 -->

CNAS-GL046:2020                                                                                                                         第6 页 共16 页
2020 年12 月24 日发布                                                                                                               2020 年12 月24 日实施
附录
常用化学检测仪器核查建议表

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/CNAS-GL046_2020_化学检测仪器核查指南_.md (reported line 804)May include surrounding context.

md

<!-- Page 7 -->

CNAS-GL046:2020                                                                                                                         第6 页 共16 页
2020 年12 月24 日发布                                                                                                               2020 年12 月24 日实施
附录
常用化学检测仪器核查建议表

Static analysis

No suspicious patterns detected.