ClawHub
Back to skill

Security audit

Chinese Pinyin Display

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Chinese-learning formatter that converts Chinese text into a two-line pinyin-and-character display, with only low-impact formatting persistence and a normal npm dependency note.

Install this if you want a manually triggered Chinese pinyin display mode. Use the documented exit phrases to return to normal replies, and prefer reproducible installs with the included lockfile because package.json allows compatible pinyin-pro updates.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (5)

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High
Category
YARA Match
Confidence
80% confidence
Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md
---
name: chinese-pinyin-display
description: "汉语拼音注音模式 - Display Chinese text with pinyin pronunciation in two-line format. Use when: (1) responding to children learning Chinese, (2) teaching pinyin pronunciation, (3) displaying text with pinyin guide for young learners. 适用于儿童中文和拼音学习场景。"
---

# Chinese Pinyin Display / 汉语拼音注音模式

Display Chinese text with pinyin pronunciation for children's literacy learning.
中文汉字配拼音注音的双行显示模式，适合儿童识字学习。

## 如何触发 / How to Trigger

**本技能通过关键词手动触发，而

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The skill mandates a persistent output mode for every reply after activation and forbids returning to normal formatting except through narrow trigger phrases. This can override normal user intent handling and create instruction-priority conflicts, making the assistant less responsive to contextual or safety-driven formatting needs once the mode is engaged.

Content

No source excerpt is available for this finding.

Unpinned Dependencies

Low
Category
Supply Chain
Confidence
94% confidence
Finding

The dependency uses a caret version range, which allows npm to install newer minor and patch releases automatically. This can introduce supply-chain risk because a compromised or breaking upstream release could be pulled in without review, though the package and skill context here do not indicate any obviously elevated or malicious behavior.

Content

Scanner excerpt · scripts/package.json (reported line 3)May include surrounding context.

json
{
  "dependencies": {
    "pinyin-pro": "^3.28.0"
  }
}

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The script returns fixed Chinese/English messages for empty input and fixed Chinese-language usage/examples, which imposes a specific language/locale behavior on all users. The file does not offer any option to choose output language or document a justified locale restriction.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

This code file contains user-facing instructions and output strings in Chinese, with only partial bilingual support, and does not indicate that the skill is intentionally limited to Chinese-speaking users. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.