Security audit

Sit Innovation Method

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only SIT innovation-method skill with no code execution, persistence, credential use, or hidden behavior.

Safe to install for Chinese-language SIT brainstorming and innovation workshops. Use care when applying templates that mention demographic or health-related user attributes, and avoid using sensitive attributes unless they are necessary, appropriate, and compliant for the project.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: 技能描述中的触发词覆盖范围很广，如“创新方法”“创意生成”“思维工具”“头脑风暴方法”等都属于高频、泛化表达，容易在大量普通对话中被误匹配触发。误触发会把用户请求导向特定方法论，导致响应偏题、上下文污染，甚至在多技能环境中压制更合适的技能选择。
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 80% confidence
Finding: 该技能整体内容与输出模板默认固定为中文，未说明可根据用户语言切换，也未提供明确合理化约束。这会造成语言强制，影响用户理解与可用性；在安全相关场景下，还可能因为用户误读约束、步骤或结论而产生执行偏差。
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 82% confidence
Finding: 该行在自然语言示例中把“性别”列为默认的用户属性之一，但未说明这是可选项、也未提供是否使用该属性的判断条件。对于通用创新模板，这种默认按性别划分用户的表述可能与组织对敏感属性最小化使用的政策预期不一致。
Content: No source excerpt is available for this finding.