Security audit

lita-sales-coach

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only Chinese sales coaching skill with disclosed financial-compliance guidance and no evidence of code execution, data access, persistence beyond normal installation, or hidden behavior.

Install only if you want a Chinese-language sales communication coach. For financial sales use, treat its wording as drafting help and keep your institution's compliance rules, risk disclosures, suitability checks, and required approvals authoritative.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Natural-Language Policy Violations

Medium

Confidence: 87% confidence
Finding: 该文档从标题、说明、安装后触发语到使用示例均仅以中文表述，并在 L57 给出固定中文触发说法，未说明是否支持其他语言或允许用户自行选择输出语言。按规则，若技能在自然语言层面强制特定语言且无用户 opt-in，可构成语言/locale 政策违反。

Vague Triggers

Medium

Confidence: 92% confidence
Finding: The activation description is extremely broad, covering not only sales coaching but also general persuasion, communication, negotiation, reporting, resilience, and 'any' scenario about helping others choose. In an agent ecosystem, this can cause the skill to trigger on unrelated or sensitive requests, resulting in unintended behavioral override, especially in regulated financial contexts where persuasive guidance may bypass narrower domain controls.

Natural-Language Policy Violations

Medium

Confidence: 84% confidence
Finding: The skill content is written to operate in Chinese and does not instruct the agent to honor the user's preferred language. This can degrade usability, obscure safety/compliance disclosures, and create misunderstanding if the agent answers in Chinese when the user requested another language, which is more concerning in financial or persuasive communications.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: The document presents all user-facing instructions, templates, and examples exclusively in Chinese. Under the policy rule, forcing a specific language without user opt-in is a natural-language policy concern unless the locale restriction is explicitly justified, which this file does not do.

Natural-Language Policy Violations

Medium

Confidence: 91% confidence
Finding: The document is written as a prescriptive skill reference in Chinese and frames its intended output as ready-to-copy scripts, but it does not indicate that language should follow the user's preference or that other languages are supported. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: This markdown skill file presents all instructions and operational content exclusively in Chinese, with no indication that the user can choose another language or locale. Under the policy rule for natural-language violations, forcing a specific language without user opt-in is a reportable issue.

Natural-Language Policy Violations

Low

Confidence: 92% confidence
Finding: The document presents all guidance and examples exclusively in Chinese, and does not indicate that the skill is intended only for Chinese-speaking users or offer an alternative language/locale option. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy concern.

Static analysis

No suspicious patterns detected.