Security audit

机器人世界模型与动作模型（WAM）技术仓库维护Skill；支持搜集、分析、分类并生成图文并茂的AWAR仓库文档；包含科普介绍、深度技术分析、快速上手指南；当用户需要构建机器人AI领域技术仓库或研究VLA/RT-2/Dreamer等前沿工作时使用

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-oriented robotics repository maintenance skill with no executable install code, persistence, credential handling, or hidden behavior found.

Install this if you want Chinese-language support for maintaining an AWAR-style robotics WAM documentation repository. Review generated quick-start commands before running them, and ask the agent to use another language if needed.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill description says it should be used whenever a user needs to build a robotics AI technical repository or study broad frontier topics, which creates very loose activation boundaries. Overly broad routing can cause the skill to be invoked for adjacent research, code, or documentation tasks outside its intended scope, increasing the chance of inappropriate tool use, irrelevant actions, or unsafe handling of untrusted content.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The manifest description is written to position the skill around generating repository documentation in Chinese, and the body further reinforces this with a recommendation to add Chinese annotations. There is no indication that users may choose another language or locale, which can violate a language/locale policy requiring user choice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The file title and descriptive text specify the document template entirely in Chinese, and the structure implies generated project documentation should follow that language convention. Because the template does not offer user language selection or explain that the skill is intentionally limited to Chinese-language documentation, it creates a natural-language locale policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 85% confidence
Finding: The instruction '添加中文注释（降低入门门槛）' directs contributors toward a specific language without indicating that this depends on user or repository preference. That is a natural-language locale constraint and lacks an explicit opt-in or justification as a region-specific tool.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The document is written entirely in Chinese, including the title and all instructional content, with no indication that users may choose another language or that the repository is intentionally region-specific. This can violate a language/locale policy when a skill or its documentation implicitly requires a specific language without user opt-in.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This markdown file presents all instructional and reference content in Chinese, including headings, definitions, and repository guidance. Under the policy, forcing a specific language without user opt-in or a documented justification is a natural-language policy concern.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that the skill is intended only for a Chinese-speaking audience or that other language options are available. The policy calls for flagging language or locale constraints when they are imposed without user opt-in or justification.
Content: No source excerpt is available for this finding.