Daily Review Editor

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 3:46 AM UTC
• Version: 1.0.0

Overview

This is a narrowly scoped Chinese Markdown editing skill for turning digest candidates into a daily review, with no executable code or hidden high-impact behavior found.

Install this if you want a strongly opinionated Simplified Chinese Daily Review format. Be aware it will steer output into six fixed sections and Chinese summaries for English sources, but it does not add code, background tasks, credential use, or automatic FreshRSS state changes.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 1)May include surrounding context.

md

# Daily Review Spec

## 栏目说明

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 60% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · references/daily-review-spec.md (reported line 1)May include surrounding context.

md

# Daily Review Spec

## 栏目说明

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The instruction "以简体中文工作" forces a specific language for the skill's operation. Under the policy, locale or language requirements should either be optional for the user or clearly justified as region-specific; this file provides neither.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

Lines L71-L72 state that when content comes from English originals, the review 'must provide a Chinese summary.' This is a natural-language locale requirement that forces a specific output language without user opt-in or a documented region-specific justification.

Content

No source excerpt is available for this finding.