Back to skill

Security audit

Second Brain Builder

Security checks for vulnerabilities and agentic risk

Overview

This skill coherently helps users research and add clearly marked AI annotations to a local second-brain knowledge base.

Install this if you want a Chinese-oriented workflow for researching concepts and adding clearly marked AI annotations to your notes. Before use, point it at the intended second-brain folder and review proposed writebacks, especially because it can search local note content and create or update concept files when explicitly invoked.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The instruction 'Default to Chinese unless the user asks otherwise' imposes a language preference by default rather than offering a neutral user choice. This matches the policy category for language/locale constraints without explicit opt-in.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The file requires all AI-generated additions to use the specific Chinese label AI 注 and the Chinese phrase AI 注:更正建议. This is a natural-language locale constraint, and the document does not provide user opt-in, alternatives, or a stated region-specific justification for forcing that language form.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

The short description is written in Chinese while the default prompt is written in English, but the file does not indicate that language selection is optional or user-configurable. This can create a locale-policy issue because the skill presents a fixed multilingual experience without explicit opt-in or documented justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
92% confidence
Finding

The template’s example packet is written with Chinese headings such as '知识点' and 'AI 注:概念卡片', which signals a fixed language/locale expectation. Because the file does not state that Chinese is optional or provide a user language choice, it may violate the policy against forcing a specific language without opt-in.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.