Back to skill

Security audit

医疗报告解读助手

Security checks for vulnerabilities and agentic risk

Overview

This is a Markdown-only Chinese medical report explanation skill with clear educational disclaimers and no evidence of code execution, persistence, or data exfiltration.

Before installing, treat this as an educational aid only. Do not rely on it for diagnosis, medication, treatment decisions, or urgent symptoms, and avoid sharing identifiable health details unless you are comfortable providing them to the host agent environment.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

This markdown file describes use as '上传或描述你的检验报告,我会帮你解读' and provides examples, but it does not clearly define activation boundaries, exclusions, or negative examples. Phrases like helping interpret a report are broad enough that the skill could be invoked on loosely related medical questions beyond the intended report-analysis scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

The README presents all user-facing instructions, examples, and warnings in Chinese, which effectively imposes a specific language on users. The policy allows locale constraints when users are given a choice or when the restriction is explicitly documented and justified, neither of which appears here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill's natural-language instructions, examples, and warnings are all in Chinese, which effectively forces a specific language for users. There is no indication that the language choice is optional or that the skill is intentionally limited to a Chinese-speaking audience.

Content

No source excerpt is available for this finding.