Back to skill

Security audit

作文提分大师

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese composition tutoring skill with clear educational scope and no evidence of hidden execution, data access, persistence, or destructive behavior.

Install this if you specifically want a Chinese composition tutor. Be aware that its coaching style is intentionally Chinese-composition focused and references bundled PDF knowledge sources that were not present in the inspected artifact, so source-backed tutoring may depend on the runtime having retrieval or local materials available.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (9)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

The file presents the skill entirely in Chinese and describes specifically Chinese-composition teaching methods and roles, but does not mention any language choice, opt-in, or region-specific limitation. Under the stated policy, forcing a specific language or locale without user choice is a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The description repeatedly frames the skill as specifically for Chinese composition guidance (e.g. '中文作文辅导技能' and '指导学生中文作文写作') without stating that users may choose another language or locale. This can violate the language/locale policy criterion because it appears to force a specific language context rather than offering an opt-in or documenting a justified regional restriction.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The natural-language description says the skill coaches 'Chinese essay writing' and the default prompt specifies coaching 'on Chinese composition,' which imposes a specific language/locale. The file does not indicate that users can opt into another language or that this locale restriction is explicitly justified as a region-specific requirement.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The instruction 'Use this file when the user wants stronger originality, deeper language, or more memorable writing' defines activation in broad, subjective terms. It does not provide specific trigger phrases, scope limits, or exclusion conditions, which could cause the skill to be invoked for many ordinary writing requests.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

Line L03 instructs use of this strategy when tutoring should reflect specific Chinese composition teaching traditions, which imposes a locale/cultural teaching preference as a default condition. Under the policy, forcing a specific language/locale or equivalent locale-specific instructional framing without user choice should be flagged.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The file title and opening description explicitly position this as a Chinese-language source persona, and the instructions throughout are written as binding guidance for the skill. There is no indication that the user may choose another language or locale, which can violate language/locale policy requirements when applied broadly.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The phrase "Chinese composition mentor" indicates the skill is designed around a specific language/locale, but the file does not state that users can opt in to Chinese or choose another language. Under the policy, forcing a specific language without user choice is a natural-language policy violation unless clearly justified as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

Lines L31-L32 use Chinese terms ("审题" and "立意") inside otherwise English guidance. This imposes a language-specific requirement or assumption without user opt-in, which can violate language/locale policy for a general-purpose skill reference.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
83% confidence
Finding

The instruction to 'Use Chinese fullwidth parentheses' imposes a language/locale-specific convention as part of normal behavior. The file does not indicate this is optional based on user preference or that the persona is restricted to a Chinese-language context.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.