Security audit

读书笔记整理与知识图谱构建

Security checks for vulnerabilities and agentic risk

Overview

This skill provides markdown guidance for organizing reading notes and knowledge graphs, with no code execution, credentials, network access, or hidden high-impact behavior.

Installers should know this skill’s templates and reference material are heavily Chinese/bilingual. Use it if that fits your workflow, or adapt the generated note headings and examples to your preferred language.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Natural-Language Policy Violations

Medium

Confidence: 86% confidence
Finding: This markdown file contains substantial instructional content and output templates in Chinese, including section headers and example text, while the skill description does not state that the skill is Chinese-specific or let the user opt into that language. Under the policy, forcing a specific language or locale without user choice is a natural-language policy concern.

Natural-Language Policy Violations

Low

Confidence: 77% confidence
Finding: This markdown file contains substantial bilingual content, including Chinese headings and guidance alongside English example notes. Under the language/locale policy rule, forcing or assuming a specific language presentation without explicit user choice can be a policy concern when the skill content is intended as reusable guidance.

Natural-Language Policy Violations

Low

Confidence: 86% confidence
Finding: This markdown file contains instructional content almost entirely in Chinese, but it does not indicate that Chinese is optional, user-selected, or required for a justified regional use case. Under the language/locale policy criterion, forcing a specific language without opt-in can be considered a natural-language policy violation.

Natural-Language Policy Violations

Low

Confidence: 89% confidence
Finding: This markdown file contains natural-language guidance presented partly in Chinese and partly in English, such as bilingual section titles and templates. Because the content does not state that the mixed-language format is optional or region-specific, it may conflict with a language/locale policy requiring user choice or explicit justification.

Static analysis

No suspicious patterns detected.