Security audit

Extenics Innovation Method

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Markdown-only innovation-method skill, with no code execution or persistence, but users should treat its patent design-around content as non-legal guidance.

Install only if you want a Chinese-language TRIZ/Extenics workflow for structured innovation analysis. Do not rely on its patent design-around examples as legal advice; use qualified IP counsel for freedom-to-operate, infringement, or patentability decisions.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (7)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The activation description lists a very wide range of loosely related intents such as innovation methods, product innovation, patent innovation, system engineering innovation, and general creative thinking terms, without meaningful exclusions or disambiguation rules. This can cause the skill to activate outside its intended scope, leading the agent to apply a rigid methodology in unrelated contexts, override better-matched skills, or mishandle sensitive requests such as patent, engineering, or decision-support tasks.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 87% confidence
Finding: The entire skill reference is written exclusively in Chinese and presents all user-facing prompts and workflow guidance in that language, without any indication that users may choose another language. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.
Content: No source excerpt is available for this finding.

Ae4

Medium

Category: analysis-evasion
Confidence: 80% confidence
Finding: Suspicious Unicode normalization or mixed-script content
Content: No source excerpt is available for this finding.

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This section goes beyond neutral innovation methodology and provides concrete guidance for designing around a competitor’s patent portfolio, including identifying protected claim elements and proposing substitute technical routes to avoid infringement risk. Even if framed as innovation or IP strategy, this materially assists legal/technical circumvention behavior and expands the skill into sensitive competitive-evasion advice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The natural-language description and operational guidance are entirely in Chinese and present the skill as operating in that language, with no indication that the user can choose another language. For a general-purpose skill, this can violate language/locale policy unless the language restriction is explicitly justified or opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file contains only Chinese-language instructional content and does not indicate that the skill is region-specific or that users can choose another language. Under the policy rule for language or locale constraints, forcing a single language without opt-in is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 89% confidence
Finding: SQP-3 applies to all file types and covers natural-language policy violations such as forcing a specific language without user opt-in. This guide presents all instructions, templates, and examples only in Chinese and does not indicate that other languages are supported or optional.
Content: No source excerpt is available for this finding.