Back to skill

Security audit

Training Scheduler

Security checks for vulnerabilities and agentic risk

Overview

This is a Chinese-language training planning skill with no executable code, hidden install behavior, or evidence of data exfiltration.

Install this if you want a Chinese-language assistant for training schedule and operations planning. Before using it with real events, be deliberate about sharing participant lists, payment status, cost data, lecturer details, or historical records, and keep any reminders or recurring summaries under explicit user control.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The prompt is written as a direct role instruction in Chinese and does not indicate that the assistant should adapt to the user's preferred language. This creates a natural-language locale policy issue because it effectively fixes the skill's operating language without user opt-in or documented regional justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The manifest presents the skill name and description entirely in Chinese, which indicates a fixed language choice in user-facing metadata. There is no accompanying opt-in, alternate locale, or justification that this skill is intended only for a Chinese-speaking or region-specific audience.

Content

No source excerpt is available for this finding.