Security audit

福昕 Office 助手

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Chinese-language Fuxin Office orchestration skill for local Word, Excel, and PowerPoint workflows, with document-writing authority but no hidden persistence or exfiltration behavior found.

Install this only if you intend to let the agent operate a local Fuxin Office bridge and modify active Office documents. Review generated edits before saving; ordinary edits are described as undoable, while save operations require confirmation.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (11)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: L007 明确写明“语言：简体中文”，整份说明也未提供任何语言切换、用户选择或适用范围说明。根据规则，强制特定语言且没有用户 opt-in 或正当的地域限定说明，属于自然语言层面的语言/locale 策略违规。
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: 触发词包含过于宽泛的日常词汇“Office”，会让技能在用户只是泛泛提到办公软件、文档环境或无关上下文时被误触发。该技能又是“唯一入口”并具备跨产品路由和写操作编排能力，误激活后可能把普通对话升级为预检、路由或后续写入流程，扩大误操作面。
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: 将“未归类”请求直接路由到本汇总层 E2E 分步，边界过于模糊，等于给未明确识别的输入一个默认执行通道。对于具备跨 Word/Excel/PPT 编排和写操作能力的入口技能，这会导致意图不清时仍可能继续预检、规划甚至推进多步骤操作，增加错误路由和越权式扩展执行的风险。
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The instruction "用简体中文输出" imposes a fixed language policy for all interactions. The file does not offer the user a language choice or explain a justified region-specific requirement, so this is a natural-language policy violation under the locale/language rule.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 83% confidence
Finding: This JSON sample defines the skill examples entirely in Chinese, including the top-level description and all user task examples, with no indication that the skill supports other languages or that Chinese is an explicit user-selected locale. Under the policy, a skill that effectively imposes a specific language without opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The manifest sets processingLanguage to zh-CN, which indicates a fixed language/locale behavior. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified, which is not present here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The document explicitly requires that error responses 'must include Chinese user_message', which forces a specific language for user-facing output. This is a natural-language policy concern because the file does not indicate user choice, opt-in, or a documented region-specific justification for enforcing Chinese.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The title and description are written entirely in Chinese and describe the skill's externally exposed interface and task input expectations in Chinese, with no indication that other languages are supported or that this is a region-specific skill. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: Line L03 states the file follows Chinese-localized documentation links and is written entirely in Chinese, which indicates a language constraint in natural-language content. The file does not offer an alternative language or explain that the skill is intentionally limited to a Chinese-speaking or region-specific audience.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file contains natural-language policy-relevant content entirely in Chinese, which can impose a language constraint on users who may not understand it. The file does not offer an alternative language, opt-in, or any explicit justification that the skill is intended only for a Chinese-language audience.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: 该技能参考文档从标题到全部操作说明均仅以中文呈现，未说明是否允许用户选择其他语言或区域设置。按规则，若技能在自然语言层面强制特定语言且无用户 opt-in，属于语言/locale 政策风险。
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.