Security audit

专业中文写稿助手

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese writing assistant, but it explicitly promotes rewriting text to evade similarity checks, which creates a plagiarism-evasion concern.

Review this skill carefully before installing. It appears technically low-risk for your device because it has no code or privileges, but it is designed around rewriting existing text to reduce detectable similarity. Use only for legitimate editing, original drafting, or properly attributed transformation, not to disguise copied work.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Natural-Language Policy Violations

Medium

Confidence: 96% confidence
Finding: The manifest description and title present the skill as a Chinese-only writing assistant ('专业中文写稿助手') and all instructions are written exclusively in Chinese. This imposes a language/locale constraint without any user opt-in or explanation that the skill is intended for a region-specific or Chinese-only use case.

Natural-Language Policy Violations

Medium

Confidence: 88% confidence
Finding: This style guide is entirely prescriptive for Chinese-platform writing conventions and assumes Chinese-language phrasing throughout, such as platform-specific slang and Chinese copy structures. Because it does not indicate that language or locale should be chosen based on user preference or context, it can be read as forcing a specific language/locale without opt-in.

Natural-Language Policy Violations

Medium

Confidence: 98% confidence
Finding: The file is explicitly labeled for '洗稿专用' and provides a structured synonym/phrase substitution library intended to preserve meaning while disguising wording. In the context of a writing assistant whose stated purpose includes 洗稿改写 and lowering repetition, this materially enables deceptive rewriting, plagiarism evasion, and circumvention of originality or moderation checks.

Static analysis

No suspicious patterns detected.