Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md | JavaScript 核心 | `references/javascript.md` | 原型链、闭包、事件循环、Promise、ES6+ |
Security audit
Frontend Interviewer CN
Security checks for vulnerabilities and agentic risk
Overview
This is a Chinese frontend interview coaching skill made of markdown question banks, with no hidden execution, credential access, persistence, or exfiltration found.
Install only if you want a Chinese-language frontend interview coach. Expect it to answer in Chinese and to use bundled topic notes for frontend interview practice; be aware that generic prompts like asking for an explanation or a comparison may activate it. The referenced performance topic file is missing from the package, so performance-specific coverage may be incomplete.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (14)
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 70% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
md | 适用场景 | 微服务、移动端、跨域 | 传统 Web 应用 | **最佳实践**： - Access Token 短期（15min） + Refresh Token 长期（7天） - Refresh Token 存 HttpOnly Cookie，Access Token 存内存 - 注销时将 Refresh Token 加黑名单
Credential Access
High
- Category
- Privilege Escalation
- Confidence
- 70% confidence
- Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
- Content
md | 适用场景 | 微服务、移动端、跨域 | 传统 Web 应用 | **最佳实践**： - Access Token 短期（15min） + Refresh Token 长期（7天） - Refresh Token 存 HttpOnly Cookie，Access Token 存内存 - 注销时将 Refresh Token 加黑名单
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The name, description, and overview specify the skill as a Chinese frontend interview coach for Chinese-speaking developers, but the file does not state that users may choose another language. Under the policy, enforcing a specific language without opt-in is a natural-language policy violation unless clearly justified and documented as a region-specific constraint.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The trigger phrases are broad natural-language expressions such as '解释一下XXX' and '开始面试', which can overlap with ordinary conversation and cause the skill to activate when the user did not explicitly intend to use it. In an agent environment, unintended activation can misroute requests, load unnecessary reference content, or steer the assistant into an interview workflow instead of the user's actual task.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
This markdown file presents all instructional content in Chinese and does not indicate that the user can choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the natural-language policy category, forcing a specific language without user opt-in is a policy concern.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
SQP-3 applies to all file types and covers language or locale policy violations. This markdown skill/reference content forces a specific language for all users, and there is no indication that Chinese is optional or required for a justified region-specific purpose.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
This markdown file presents the skill content in Chinese from the title onward, but does not indicate that the language is optional, configurable, or required for a specific regional use case. Under the language/locale policy rule, forcing a specific language without user opt-in is a natural-language policy concern.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
This markdown file presents all instructional content in a single forced language/locale. Under the policy, language constraints should either offer user choice or be explicitly justified as region-specific; neither is present here.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The file title and all instructional content are written in Chinese, which imposes a specific language on users. Under the policy, language constraints should either offer user opt-in/choice or be clearly documented as region- or locale-specific; neither is present here.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
This markdown file presents the skill/reference material in a single forced language ('JavaScript 核心面试题库') with no indication that users can opt into another language. Under the policy, forcing a specific language without user choice is a natural-language policy concern unless the locale constraint is explicitly justified.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 84% confidence
- Finding
This markdown file is entirely presented in Chinese, starting with the title at L001, and provides no indication that the skill is region-specific or that users may choose another language. Under the natural-language policy rule, a fixed language without user opt-in can be a locale policy violation.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
This markdown file is entirely written in Chinese and presents the skill content in a single enforced locale, with no indication that users can choose another language or that the Chinese-only format is intentionally limited to a region-specific audience. Under the policy, language or locale constraints should be optional or clearly justified.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
This markdown file presents all instructional content in a single language and does not indicate that the user can opt into another language. Under the stated policy, forcing a specific language without user choice can be a natural-language policy violation unless clearly justified as region-specific.
- Content
Static analysis
No suspicious patterns detected.