Security audit

KnowPitch

Security checks for vulnerabilities and agentic risk

Overview

This skill is a learning aid that turns a topic into a football-formation study card and local SVG diagram, with only minor language-default considerations.

Installers should understand this skill is primarily Chinese by default and creates local JSON/SVG output files when used. Review or set the language parameter if another language is preferred, and use it for educational topic explanations rather than precise factual reports unless the agent first verifies sources.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (5)

Natural-Language Policy Violations

Medium

Confidence: 96% confidence
Finding: The input contract states `language` is optional and the default is Chinese. This imposes a specific language by default rather than offering a neutral default or explicit user choice, which matches the language/locale policy violation category.

Natural-Language Policy Violations

Medium

Confidence: 92% confidence
Finding: This markdown file presents all user-facing instructional content in Chinese and does not indicate that the user can choose another language. Under the policy, forcing a specific language without user opt-in can be a natural-language policy violation unless the locale restriction is explicitly justified.

Natural-Language Policy Violations

Low

Confidence: 92% confidence
Finding: The input contract states '输出语言，默认中文', which imposes a specific language by default. Under the policy, locale or language should not be forced unless the user is given a clear choice or the constraint is justified; here choice exists only as an optional override, not explicit opt-in.

Natural-Language Policy Violations

Low

Confidence: 93% confidence
Finding: This markdown file presents all user-facing instructions exclusively in Chinese, and there is no indication that the skill is region-specific or that users may opt into another language. Under the language/locale policy rule, forcing a specific language without user opt-in is a natural-language policy concern.

Natural-Language Policy Violations

Low

Confidence: 91% confidence
Finding: The file’s docstring, labels, warnings, and generated user-facing text are all hardcoded in Chinese, including usage/help text and SVG labels. This imposes a specific language choice on users without offering a locale option or documenting a justified region-specific constraint.

Static analysis

No suspicious patterns detected.