Security audit

wenlv-opportunity-diagnosis

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Chinese tourism-project diagnosis skill that collects project details and produces go/no-go advice without hidden persistence, credential use, or remote execution.

Before installing, treat outputs as preliminary business and compliance screening, not final legal, regulatory, or investment advice. Avoid sharing unnecessary confidential project or financial details, and confirm you want this skill used when asking broad project feasibility questions.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill description includes many broad natural-language trigger phrases such as '项目问题诊断' and '项目能不能做', which can overlap with ordinary user requests and cause this skill to activate when the user did not intend a formal go/no-go diagnosis. Misrouting is security-relevant because it can override a more appropriate specialist skill, collect unnecessary project data, or deliver high-stakes investment guidance in the wrong context.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: This markdown template is entirely written in Chinese and structures the report headings, labels, and outcome language accordingly, implying the skill operates in a fixed language. The policy allows locale constraints only when the skill offers user choice or clearly documents a justified region-specific limitation, neither of which appears in this file.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown file uses Chinese throughout the rubric and provides no indication that users may choose another language or that the skill is intentionally limited to a Chinese-speaking audience. Under the policy rule, forcing a specific language without user opt-in is a natural-language locale violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 88% confidence
Finding: The entire skill file is written only in Chinese and does not provide any language-selection option or note that the skill is intentionally limited to a Chinese regulatory context. Under the stated policy, forcing a specific language without user opt-in can be a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The manifest presents the skill name, description, and category entirely in Chinese, which indicates a fixed language experience without any visible option for users to choose another language or opt in to that locale. Under the stated policy, language-specific behavior should either offer a choice or clearly document a justified locale constraint.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This code file contains natural-language instructions, labels, and output strings entirely in Chinese, and it does not provide any option for users to select another language. Under the policy, forcing a specific language without user opt-in is a locale-policy issue unless the constraint is clearly documented and justified.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.